CVE-2021-34931

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34931

CVE-2021-34931 affects Bentley View 10.15.0.75 and relates to parsing JT files. The root cause is a failure to validate the existence of an object before performing operations, enabling a use-after-free style condition that can lead to remote code execution. Exploitation requires user interaction...

CVE-2021-34930

The CVE-2021-34930 issue affects Bentley View (e.g., version 10.15.0.75) and arises from parsing JT files. The root cause is a read past the end of an allocated buffer in the JT file parser, enabling remote code execution in the current process with user interaction required (the user must open a...

CVE-2021-34929

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34928

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34927

CVE-2021-34927 affects Bentley View 10.15.0.75 and is due to a flawed JT file parsing that can trigger a read past the end of an allocated buffer, allowing remote code execution. Exploitation requires user interaction (target must open a malicious JT file or visit a crafted page). Multiple source...

CVE-2021-34926

CVE-2021-34926 (Bentley View) affects Bentley View 10.15.0.75, where the flaw lies in parsing of JT files. Crafted JT data can trigger an out‑of‑bounds write, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or...

CVE-2021-34925

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34924

Bentley View 10.15.0.75 is affected by a JT file parsing flaw that can cause out-of-bounds writes, enabling remote code execution with user interaction (open a malicious JT file). Multiple sources (ZDI-21-1512, CNVD/CNNVD, Red Hat, NVD) confirm the vulnerability and its write-past-end condition i...

CVE-2021-34922

Bentley View 10.15.0.75 is affected by a JT file parsing flaw that leads to use-after-free and remote code execution. Attack requires user interaction (open a malicious JT file/page); no remote exploit without user action. Root cause: object existence not validated during JT parsing, enabling arb...

CVE-2021-34922

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34921

CVE-2021-34921 affects Bentley View 10.15.0.75. The flaw is an out-of-bounds write during JT file parsing, enabling remote code execution when a user opens a malicious JT file or visits a crafted page. User interaction is required. Several sources (ZDI-21-1509; Red Hat RH/CVE entry; CNVD; CNNC; N...

CVE-2021-34920

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34920

Bentley View 10.15.0.75 is affected by CVE-2021-34920 due to an out-of-bounds write in the JT file parser, enabling remote code execution. The flaw arises when parsing JT files; crafted JT data can trigger a write past the end of an allocated buffer, allowing code to run in the context of the cur...

CVE-2021-34919

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34919

Bentley View is affected by CVE-2021-34919 via the JP2 file parsing path. The root cause is lack of validation when operating on an object, leading to a use-after-free condition that can allow remote code execution in the context of the current process. Exploitation requires user interaction (e.g...

CVE-2021-34918

CVE-2021-34918 affects Bentley View 10.15.0.75. The vulnerability resides in JP2 file parsing, where crafted JP2 data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a m...

CVE-2021-34917

CVE-2021-34917 affects Bentley View 10.15.0.75. The issue arises from parsing of J2K files and a lack of validating the existence of an object before operating on it, enabling remote code execution when a user visits a malicious page or opens a malicious file. Exploitation is possible via user in...

CVE-2021-34916

Summary of CVE-2021-34916 (Bentley View) : The vulnerability affects Bentley View 10.15.0.75 and arises from improper validation during DWG file parsing, causing an out-of-bounds read (read past end of allocated buffer). An attacker can exploit this via a visited malicious page or opened file, wi...

CVE-2021-34915

CVE-2021-34915 affects Bentley View 10.15.0.75. The root cause is a flaw in J2K file parsing that can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (target must visit a malicious pa...