← CVE Intelligence

CVE-2023-2762

Use-After-Free vulnerability in SLDPRT file reading procedure affecting SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023 PUBLISHED

Description (CNA)

A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file.

Affected (CNA)

Vendor / productVersions
Dassault Systèmes / SOLIDWORKS Desktopaffected Release SOLIDWORKS 2021 Golden through Release SOLIDWORKS 2021 SP5.1; affected Release SOLIDWORKS 2022 Golden through Release SOLIDWORKS 2022 SP5; affected Release SOLIDWORKS 2023 Golden through Release SOLIDWORKS 2023 SP2

CWE

CWE-416

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.