CVE-2021-46605

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46605. The issue is a BMP image parsing heap-based overflow caused by insufficient validation of the length of user-supplied data before copying it to a heap buffer, enabling remote code execution. Exploitation requires user interact...

CVE-2021-46605

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46603

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46603 due to a heap-based buffer overflow in the J2K image parser. The vulnerability arises from inadequate validation of the length of user-supplied data before copying it into a heap buffer, allowing remote attackers to execute arb...

CVE-2021-46602

In Bentley MicroStation CONNECT 10.16.0.80, CVE-2021-46602 is tied to a flaw in 3DS file parsing caused by improper validation of user-supplied data, resulting in a read past the end of an allocated buffer. This can disclose sensitive information and, in combination with other vulnerabilities, en...

CVE-2021-46600

Bentley MicroStation CONNECT 10.16.0.80 is affected. The vulnerability arises from improper validation in JT file parsing, leading to a read past the end of an allocated buffer (out-of-bounds read) and information disclosure. User interaction is required (visiting a malicious page or opening a ma...

CVE-2021-46599

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46599. The issue is a PDF parsing flaw caused by insufficient validation that leads to a read past the end of an allocated buffer. This can disclose sensitive information and, in conjunction with other vulnerabilities, may allow arbi...

CVE-2021-46597

Bentley MicroStation CONNECT 10.16.0.80 is affected by a vulnerability in JT file parsing (use-after-free) that allows remote code execution. The flaw stems from not validating object existence before operations; exploitation requires user interaction (visiting a malicious page or opening a malic...

CVE-2021-46596

Bentley MicroStation CONNECT 10.16.0.80 is affected by an OBJ file parsing flaw that can disclose sensitive information due to an out-of-bounds read in the parser. The issue stems from insufficient validation of user-supplied data, allowing read past the end of an allocated buffer. Exploitation r...

CVE-2021-46593

CVE-2021-46593 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is in parsing of DWG files due to insufficient validation, causing a read past the end of an allocated buffer and potential arbitrary code execution in the current process when combined with other vulnerabilities. Attacker ...

CVE-2021-46592

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46591

The CVE-2021-46591 entry covers Bentley MicroStation CONNECT 10.16.0.80. The vulnerability resides in the parsing of JT files, where crafted JT data can trigger a read past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires ...

CVE-2021-46590

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46588

CVE-2021-46588 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is a parsing flaw in JT files that leads to a use-after-free, enabling remote code execution. Exploitation requires user interaction (visit a malicious page or open a malicious file). Multiple connected sources (e.g., ZDI-2...

CVE-2021-46586

Bentley MicroStation CONNECT (affected version 10.16.0.80) is vulnerable due to a flaw in 3DS file parsing that can trigger a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file); ...

CVE-2021-46582

Bentley MicroStation CONNECT (versions including 10.16.0.80) is affected by a JP2 image parsing vulnerability. The flaw arises from not validating the existence of an object before performing operations on it, enabling use-after-free-like behavior that can lead to remote code execution. Exploitat...

CVE-2021-46581

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46580

CVE-2021-46580 affects Bentley MicroStation CONNECT. The issue is a JT file parsing use-after-free caused by not validating an object’s existence before operations, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The ...

CVE-2021-46578

Bentley MicroStation CONNECT JT file parsing vulnerability (CVE-2021-46578) is a use-after-free flaw that allows remote code execution. The issue arises in parsing JT files and stems from not validating the existence of an object before performing operations on it. Exploitation requires user inte...

CVE-2021-46578

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46576

Bentley MicroStation CONNECT 10.16.0.80 is affected. The vulnerability lies in JT file parsing, where crafted JT data can trigger a write past the end of an allocated buffer, allowing remote code execution in the context of the current process. User interaction is required (the target must visit ...