CVE-2021-34893

CVE-2021-34893 affects Bentley View 10.15.0.75. The flaw is in BMP file parsing where the length of user-supplied data is not properly validated before copying to a heap-based buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (vis...

CVE-2021-34880

Bentley View 10.15.0.75 is affected by CVE-2021-34880 due to a flaw in 3DS file parsing that can trigger a read past the end of an allocated buffer. This enables remote code execution in the context of the current process and requires user interaction (visiting a malicious page or opening a malic...

CVE-2021-34876

CVE-2021-34876 affects Bentley View 10.15.0.75. The flaw is in JT file parsing, where crafted JT data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or...

CVE-2021-34934

CVE-2021-34934 affects Bentley View 10.15.0.75, with a vulnerability in the parsing of JT files that can cause memory corruption and allow to execute code in the target process. The attack requires user interaction (visiting a malicious page or opening a malicious file). Several connected sources...

CVE-2021-34886

Bentley View 10.15.0.75 is affected by CVE-2021-34886. The issue lies in FBX file parsing where the code does not validate the existence of an object before performing operations, enabling information disclosure. Multiple sources (NVD, Red Hat, CVE records, ZDI advisory) describe this as a use-af...

CVE-2021-34899

Bentley View 10.15.0.75 is vulnerable to a remote code execution through out-of-bounds writes while parsing JT files. Crafted JT data can trigger a write past the end of an allocated buffer, allowing an attacker to execute code in the context of the victim process. User interaction is required (v...

CVE-2021-34898

CVE-2021-34898 – Bentley View : Affected product is Bentley View 10.15.0.75. The vulnerability is in the parsing of JT files, where crafted JT data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. User interaction is re...

CVE-2021-34911

Bentley View 10.15.0.75 is affected by a vulnerability in 3DS file parsing that stems from not validating the existence of an object before operations, enabling potential remote code execution. The issue is documented across multiple sources (ZDI-21-1500, NVD, Red Hat, CNVD/CNNVD-style records) a...

CVE-2021-34882

Bentley View 10.15.0.75 is affected by a JP2 file parsing vulnerability that enables information disclosure through an out-of-bounds read, caused by insufficient validation of user-supplied data. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The i...

CVE-2021-34913

Bentley View 10.15.0.75 is affected by CVE-2021-34913 due to a flaw in JT file parsing that can trigger a read past the end of an allocated buffer, enabling remote code execution. The vulnerability requires user interaction (the target must open a malicious JT file or visit a crafted page). Multi...

CVE-2021-34897

Bentley View 10.15.0.75 is affected by CVE-2021-34897 due to an out-of-bounds write in DGN file parsing. Crafted DGN data can trigger a write past the end of an allocated buffer, allowing an attacker to execute code in the context of the current process. Exploitation requires user interaction (vi...

CVE-2021-34906

CVE-2021-34906 affects Bentley View 10.15.0.75. The issue arises in J2K file parsing due to failing to validate object existence before operations, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or opening a ...

CVE-2021-34894

CVE-2021-34894 affects Bentley View 10.15.0.75, with a flaw in 3DS file parsing where the code fails to validate an object before operating on it. The vulnerability can enable remote code execution in the context of the current process when a user opens a crafted 3DS file (use-after-free-like beh...

CVE-2021-34904

CVE-2021-34904 affects Bentley View 10.15.0.75. A heap-based buffer overflow in the DGN file parsing path results from insufficient validation of the length of user-supplied data before copying it to a heap buffer. This allows remote code execution in the context of the current process when a use...

CVE-2021-34910

CVE-2021-34910 affects Bentley View 10.15.0.75. The vulnerability arises from parsing DGN files and is caused by insufficient validation of user-supplied data, leading to an out-of-bounds read. This could allow a local attacker who can coerce the target to visit a malicious page or open a malicio...

CVE-2021-34919

Bentley View is affected by CVE-2021-34919 via the JP2 file parsing path. The root cause is lack of validation when operating on an object, leading to a use-after-free condition that can allow remote code execution in the context of the current process. Exploitation requires user interaction (e.g...

CVE-2021-34926

CVE-2021-34926 (Bentley View) affects Bentley View 10.15.0.75, where the flaw lies in parsing of JT files. Crafted JT data can trigger an out‑of‑bounds write, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or...

CVE-2021-34933

CVE-2021-34933 affects Bentley View 10.15.0.75 and is a use-after-free/invalid object handling issue in JT file parsing that allows remote code execution. The flaw stems from not validating the existence of an object before performing operations, enabling an attacker to execute code in the curren...

CVE-2021-34901

Bentley View 10.15.0.75 is affected by CVE-2021-34901 due to a parsing flaw in 3DS files. The vulnerability causes an out-of-bounds read of data past the end of an allocated buffer, with exploitation requiring user interaction (target must visit a malicious page or open a malicious file). The iss...

CVE-2021-34905

Bentley View 10.15.0.75 is affected by CVE-2021-34905 due to a heap-based buffer overflow in DGN file parsing. The flaw stems from insufficient validation of the length of user-supplied data prior to copying it, allowing remote code execution when a user opens a malicious DGN or visits a crafted ...

CVE-2021-34915

CVE-2021-34915 affects Bentley View 10.15.0.75. The root cause is a flaw in J2K file parsing that can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (target must visit a malicious pa...

CVE-2021-34920

Bentley View 10.15.0.75 is affected by CVE-2021-34920 due to an out-of-bounds write in the JT file parser, enabling remote code execution. The flaw arises when parsing JT files; crafted JT data can trigger a write past the end of an allocated buffer, allowing code to run in the context of the cur...

CVE-2021-34879

Bentley View 10.15.0.75 is affected by a J2K File Parsing vulnerability (memory misreference/use-after-free) that allows code execution. The issue arises from not validating the existence of an object before performing operations during J2K parsing, enabling an attacker to execute code with the c...

CVE-2021-34887

Bentley View 10.15.0.75 is affected by a PDF parsing out-of-bounds read vulnerability. The issue stems from insufficient validation of user-supplied data, causing a read past the end of an allocated buffer. This can lead to sensitive information disclosure and, in conjunction with other vulnerabi...

CVE-2021-34895

Bentley View 3DS file parsing vulnerability (CVE-2021-34895) allows remote code execution by exploiting a use-after-free/object- existence check flaw. Affected product/version: Bentley View 10.15.0.75. Attack requires user interaction (target visits a malicious page or opens a malicious file). Ro...

CVE-2021-34914

Bentley View 10.15.0.75 is affected by a DGN file parsing vulnerability that can trigger an out-of-bounds write. A crafted DGN file (or malicious page/file) may allow an attacker to execute code in the process context, with user interaction required to exploit. Root cause is a write past the end ...

CVE-2021-34902

CVE-2021-34902 affects Bentley View 10.15.0.75. The flaw is in DWG file parsing, arising from insufficient validation that allows an out-of-bounds read (read past the end of an allocated object). This can lead to sensitive information disclosure. Exploitation requires user interaction (target mus...

CVE-2021-34917

CVE-2021-34917 affects Bentley View 10.15.0.75. The issue arises from parsing of J2K files and a lack of validating the existence of an object before operating on it, enabling remote code execution when a user visits a malicious page or opens a malicious file. Exploitation is possible via user in...

CVE-2021-34936

Bentley View 10.15.0.75 is affected by CVE-2021-34936 due to a JT file parsing flaw. The vulnerability stems from failing to validate the existence of an object before performing operations, enabling an attacker to execute arbitrary code in the process context after the user visits a malicious pa...

CVE-2021-34942

CVE-2021-34942 affects Bentley View (bounded by JT-file parsing). The flaw is an out-of-bounds read while parsing JT data, enabling arbitrary code execution in the process of Bentley View 10.15.0.75 when a user opens a malicious JT file or visits a malicious page. Exploitation requires user inter...

CVE-2021-34944

Bentley View 10.15.0.75 is affected by CVE-2021-34944 due to an out-of-bounds read in the JT file parsing logic caused by insufficient validation. The vulnerability requires user interaction (visiting a malicious page or opening a malicious file) and can lead to information disclosure; the descri...

CVE-2021-34888

Bentley View 10.15.0.75 is affected by CVE-2021-34888 via a vulnerability in JT file parsing. The flaw stems from improper validation of user-supplied data, causing a read past the end of an allocated buffer and enabling information disclosure; it could be leveraged with other flaws to execute ar...

CVE-2021-34903

Bentley View 10.15.0.75 is affected by a BMP file parsing flaw that can trigger an out-of-bounds write, allowing remote code execution in the target process. The vulnerability arises when crafted BMP data causes a write past the end of an allocated buffer. Exploitation requires user interaction (...

CVE-2021-34918

CVE-2021-34918 affects Bentley View 10.15.0.75. The vulnerability resides in JP2 file parsing, where crafted JP2 data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a m...

CVE-2021-34927

CVE-2021-34927 affects Bentley View 10.15.0.75 and is due to a flawed JT file parsing that can trigger a read past the end of an allocated buffer, allowing remote code execution. Exploitation requires user interaction (target must open a malicious JT file or visit a crafted page). Multiple source...

CVE-2021-34875

CVE-2021-34875 concerns Bentley View 10.15.0.75 where the 3DS file parser contains an out-of-bounds write vulnerability. Crafted 3DS data can trigger a write past the end of an allocated buffer, enabling arbitrary code execution in the context of the affected process. Several sources confirm this...

CVE-2021-34891

Bentley View JT File Parsing Use-After-Free RCE (CVE-2021-34891): Affects Bentley View 10.15.0.75. The flaw is in JT file parsing where code does not verify object existence before operations, enabling arbitrary code execution after user interaction (visit a malicious page or open a malicious JT ...

CVE-2021-34892

Bentley View vulnerability CVE-2021-34892 affects Bentley View 10.15.0.75 and stems from improper validation of the length of user-supplied data during JT file parsing, leading to a stack-based buffer overflow and remote code execution. Exploitation requires user interaction (visiting a malicious...

CVE-2021-34922

Bentley View 10.15.0.75 is affected by a JT file parsing flaw that leads to use-after-free and remote code execution. Attack requires user interaction (open a malicious JT file/page); no remote exploit without user action. Root cause: object existence not validated during JT parsing, enabling arb...

CVE-2021-34925

Bentley View 10.15.0.75 is affected by CVE-2021-34925 due to a stack-based buffer overflow in JT file parsing from improper length validation of user-supplied data, allowing remote code execution after user interaction (visiting a malicious page or opening a malicious JT file). Root cause: lack o...

CVE-2021-34878

Bentley View 10.15.0.75 is affected by CVE-2021-34878 due to a vulnerability in JT file parsing that can trigger a write past the end of an allocated buffer, allowing remote code execution. The attack requires user interaction (visiting a malicious page or opening a malicious JT file) and leverag...

CVE-2021-34916

Summary of CVE-2021-34916 (Bentley View) : The vulnerability affects Bentley View 10.15.0.75 and arises from improper validation during DWG file parsing, causing an out-of-bounds read (read past end of allocated buffer). An attacker can exploit this via a visited malicious page or opened file, wi...

CVE-2021-34907

Summary: CVE-2021-34907 affects Bentley View 10.15.0.75. The issue is in BMP file parsing, caused by lack of proper validation of the length of user-supplied data before copying into a heap-based buffer, enabling remote code execution with the attacker’s interaction on a malicious BMP/page. The v...

CVE-2021-34908

Bentley View 10.15.0.75 is affected by CVE-2021-34908. The issue arises in the parsing of J2K files where the attacker does not validate the existence of an object before performing operations, leading to remote code execution. Exploitation requires user interaction (e.g., visiting a malicious pa...

CVE-2021-34938

Bentley View 10.15.0.75 is affected by a heap-based buffer overflow in JT file parsing, caused by improper validation of user-supplied data length. This allows remote code execution and requires user interaction (visiting a malicious page or opening a crafted file). The vulnerability is associate...

CVE-2021-34885

Bentley View 10.15.0.75 is affected by a JT file parsing out-of-bounds read that allows remote code execution. Exploitation requires user interaction (visit a malicious page/open a malicious JT file). The issue is documented via ZDI-21-1474 (referred to as ZDI-CAN-14838). Mitigation: Bentley rele...

CVE-2021-34896

CVE-2021-34896 affects Bentley View 10.15.0.75 and is caused by improper validation of the length of user-supplied data during BMP file parsing, leading to a heap-based buffer overflow. The vulnerability allows an attacker to execute arbitrary code in the context of the current process after the ...

CVE-2021-34937

Bentley View 10.15.0.75 is affected by CVE-2021-34937 due to a JT file parsing flaw that does not validate object existence before operating on it, enabling remote code execution with user interaction (the target must open a malicious file/page). The issue is described as a use-after-free-like co...

CVE-2021-34883

Bentley View 10.15.0.75 is affected by CVE-2021-34883 due to a flaw in J2K file parsing. The issue stems from insufficient validation of user-supplied data, causing a read past the end of an allocated buffer and leading to sensitive information disclosure. Successful exploitation requires user in...

CVE-2021-34912

CVE-2021-34912 affects Bentley View 10.15.0.75. The vulnerability arises in the JT file parsing code, where crafted JT data can trigger a read past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (the tar...