Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101863
HistoryDec 12, 2021 - 12:00 a.m.

Bentley View DWG file parsing out-of-bounds read information disclosure vulnerability

2021-12-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
bentley view
dwg file
parsing
out-of-bounds read
information disclosure
vulnerability
pdf files
user-supplied data
allocated buffer
sensitive information

EPSS

0.001

Percentile

48.2%

Bentley View is a free viewer from Bentley Systems, Inc. An out-of-bounds read information disclosure vulnerability exists in Bentley View DWG file parsing, which stems from the lack of proper validation of user-supplied data in the parsing of PDF files resulting in reading beyond the end of the allocated buffer. An attacker could exploit this vulnerability to read sensitive information out of bounds.

EPSS

0.001

Percentile

48.2%

Related for CNVD-2021-101863