CVE-2021-46612

CVE-2021-46612 affects Bentley MicroStation CONNECT 10.16.0.80. The vulnerability lies in PDF file parsing, where crafted data can trigger a read past the end of an allocated buffer, enabling remote code execution in the process context. Exploitation requires user interaction (visiting a maliciou...

CVE-2021-46611

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46611

CVE-2021-46611 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is a JP2 image parsing flaw caused by insufficient validation, leading to a read past the end of an allocated buffer. This can enable an attacker to disclose sensitive information and, per the CVE entry, may be leveraged (i...

CVE-2021-46610

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46610. The vulnerability arises in the JT file parsing due to insufficient validation, causing a read past the end of an allocated buffer and enabling information disclosure. Exploitation requires user interaction (visiting a malicio...

CVE-2021-46608

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46607

Bentley MicroStation CONNECT 10.16.0.80 is affected by a 3DS file parsing vulnerability that can disclose sensitive information. The flaw arises from insufficient validation during 3DS data processing, causing an out-of-bounds read and potential information disclosure. Exploitation requires user ...

CVE-2021-46606

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46605

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46605

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46605. The issue is a BMP image parsing heap-based overflow caused by insufficient validation of the length of user-supplied data before copying it to a heap buffer, enabling remote code execution. Exploitation requires user interact...

CVE-2021-46603

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46603 due to a heap-based buffer overflow in the J2K image parser. The vulnerability arises from inadequate validation of the length of user-supplied data before copying it into a heap buffer, allowing remote attackers to execute arb...

CVE-2021-46602

In Bentley MicroStation CONNECT 10.16.0.80, CVE-2021-46602 is tied to a flaw in 3DS file parsing caused by improper validation of user-supplied data, resulting in a read past the end of an allocated buffer. This can disclose sensitive information and, in combination with other vulnerabilities, en...

CVE-2021-46602

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46601

Bentley MicroStation CONNECT JT File Parsing Use-After-Free Remote Code Execution (CVE-2021-46601) involves a vulnerability in the JT file parsing path where the software may perform operations on objects without validating their existence, leading to a use-after-free condition. This can allow re...

CVE-2021-46600

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46600

Bentley MicroStation CONNECT 10.16.0.80 is affected. The vulnerability arises from improper validation in JT file parsing, leading to a read past the end of an allocated buffer (out-of-bounds read) and information disclosure. User interaction is required (visiting a malicious page or opening a ma...

CVE-2021-46599

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46599. The issue is a PDF parsing flaw caused by insufficient validation that leads to a read past the end of an allocated buffer. This can disclose sensitive information and, in conjunction with other vulnerabilities, may allow arbi...

CVE-2021-46598

Bentley MicroStation CONNECT 10.16.0.80 is affected by a memory corruption remote code execution vulnerability in the JT file parser. The flaw stems from insufficient validation of user-supplied data during JT file parsing, allowing an attacker to execute code with the current process context aft...

CVE-2021-46598

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46597

Bentley MicroStation CONNECT 10.16.0.80 is affected by a vulnerability in JT file parsing (use-after-free) that allows remote code execution. The flaw stems from not validating object existence before operations; exploitation requires user interaction (visiting a malicious page or opening a malic...

CVE-2021-46596

Bentley MicroStation CONNECT 10.16.0.80 is affected by an OBJ file parsing flaw that can disclose sensitive information due to an out-of-bounds read in the parser. The issue stems from insufficient validation of user-supplied data, allowing read past the end of an allocated buffer. Exploitation r...