CVE-2021-46631

Bentley View 10.15.0.75 is affected by a remote code execution vulnerability in TIF image parsing. The root cause is uninitialized memory access during parsing, allowing an attacker to execute code in the process context when a user visits a malicious page or opens a crafted file. Multiple source...

CVE-2021-46629

CVE-2021-46629 affects Bentley View 10.15.0.75 and is due to improper validation in BMP image parsing, causing a read past the end of an allocated buffer. This can lead to information disclosure and, when combined with other vulnerabilities, potential arbitrary code execution in the context of th...

CVE-2021-46628

Summary: CVE-2021-46628 affects Bentley View; BMP image parsing flaw allows reading past end of a buffer, enabling information disclosure and potentially code execution in the context of the target process. The issue requires user interaction (target must visit a malicious page or open a maliciou...

CVE-2021-46627

CVE-2021-46627 – Bentley View : Affected product is Bentley View 10.15.0.75. The flaw is in DXF file parsing where code fails to validate the existence of an object before performing operations, enabling remote code execution. Exploitation requires user interaction (target visits a malicious page...

CVE-2021-46626

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-46626

Bentley View 10.15.0.75 is affected. The vulnerability stems from J2K image parsing, causing a read past the end of an allocated buffer and enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). No explicit remediation/versi...

CVE-2021-46625

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

CVE-2021-46625

Bentley View 10.15.0.75 is affected by CVE-2021-46625 (JT file parsing) due to a double-free/invalid-free condition in object handling that allows code execution. Exploitation requires user interaction (open a malicious file/page). Root cause: lack of validating object existence before freeing. M...

CVE-2021-46623

Bentley View 10.15.0.75 is affected by a vulnerability in parsing of 3DS files. The issue stems from insufficient validation of user-supplied data, allowing a read past the end of an allocated buffer. This can enable an attacker to disclose sensitive information and, in conjunction with other vul...

CVE-2021-46621

This CVE (CVE-2021-46621) affects Bentley MicroStation CONNECT 10.16.0.80 and is tied to parsing JT files. The root cause is a double-free/invalid object operation during JT file handling, leading to remote code execution when a user visits a malicious page or opens a crafted file. Exploitation r...

CVE-2021-46620

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46620

CVE-2021-46620 affects Bentley MicroStation CONNECT 10.16.0.80. The connected ZDI advisory (ZDI-22-207) describes a vulnerability in FBX file parsing where improper validation can cause a read past the end of an allocated buffer. This results in an information disclosure vulnerability; exploitati...

CVE-2021-46619

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46619

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46619 due to an out-of-bounds read during PDF parsing, enabling remote code execution when a user opens a malicious PDF or visits a crafted page/file. The vulnerability requires user interaction. Reports and advisories (e.g., ZDI-22-...

CVE-2021-46618

CVE-2021-46618 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is a parsing flaw in PNG handling that leads to a read past the end of an allocated buffer due to insufficient validation of user-supplied data. Exploitation requires user interaction (target must visit a malicious page or ...

CVE-2021-46617

CVE-2021-46617 affects Bentley MicroStation CONNECT 10.16.0.80. The vulnerability is in the parsing of TIF images and stems from the lack of proper initialization of memory prior to access, enabling an attacker to execute code in the context of the current process . This requires user interaction...

CVE-2021-46616

Bentley MicroStation CONNECT 10.16.0.80 is affected by a BMP image parsing flaw that can cause an out-of-bounds read in the parsing code. The issue, triggered by processing a malicious BMP, allows disclosure of sensitive data and can enable arbitrary code execution in the context of the current p...

CVE-2021-46616

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46615

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46615 due to a parsing flaw in BMP image handling. The root cause is inadequate validation of user-supplied data, leading to a read past the end of an allocated buffer, which can disclose sensitive information. In conjunction with ot...

CVE-2021-46614

CVE-2021-46614 concerns Bentley MicroStation CONNECT 10.16.0.80, where the vulnerability arises in the parsing of J2K images. The underlying flaw is an out-of-bounds read that can be triggered by crafted J2K data, allowing an attacker to execute arbitrary code in the context of the affected proce...