CVE-2021-34896

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34896

CVE-2021-34896 affects Bentley View 10.15.0.75 and is caused by improper validation of the length of user-supplied data during BMP file parsing, leading to a heap-based buffer overflow. The vulnerability allows an attacker to execute arbitrary code in the context of the current process after the ...