CVE-2021-34900

Bentley View 10.15.0.75 is affected by CVE-2021-34900. The flaw is in J2K file parsing and stems from failing to validate the length of user-supplied data before copying into a heap buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or openin...