CVE-2025-0831

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Out-Of-Bounds Read vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted JT file.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Jul 15, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-08325.4A stored Cross-site Scripting (XSS) vulnerability affecting Project Gantt in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIEN CVE-2025-08335.4A stored Cross-site Scripting (XSS) vulnerability affecting Route Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPER CVE-2025-08347.8Privilege escalation vulnerability has been found in Wondershare Dr.Fone version 13.5.21. This vulnerability could allow an attacker to esca CVE-2025-08357.8Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory.CVE-2025-08366.3Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management Server to have full r CVE-2025-08375.4The Puzzles theme for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 4.2.6 due to i CVE-2025-08389.8There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}ha CVE-2025-08395.4The ZoomSounds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 6.91 due t CVE-2025-08407.5A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of t CVE-2025-08417.3A vulnerability has been found in Aridius XYZ up to 20240927 on OpenCart and classified as critical. This vulnerability affects the function CVE-2025-08429.8A vulnerability was found in needyamin Library Card System 1.0 and classified as critical. This issue affects some unknown processing of the CVE-2025-08439.8A vulnerability was found in needyamin Library Card System 1.0. It has been classified as critical. Affected is an unknown function of the f