CVE-2021-46598

Bentley MicroStation CONNECT 10.16.0.80 is affected by a memory corruption remote code execution vulnerability in the JT file parser. The flaw stems from insufficient validation of user-supplied data during JT file parsing, allowing an attacker to execute code with the current process context aft...

CVE-2021-46656

CVE-2021-46656 affects Bentley View 10.15.0.75. The flaw is a JT file parsing buffer overflow that can lead to remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The issue is documented across multiple sources (e.g., ZDI-22-243, ...

CVE-2021-46603

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46603 due to a heap-based buffer overflow in the J2K image parser. The vulnerability arises from inadequate validation of the length of user-supplied data before copying it into a heap buffer, allowing remote attackers to execute arb...

CVE-2021-46592

CVE-2021-46592 affects Bentley MicroStation CONNECT 10.16.0.80. The root cause is in the parsing of 3DS files where the code fails to validate the existence of an object before performing operations, leading to use-after-free and remote code execution. Exploitation requires user interaction (visi...

CVE-2021-46594

Bentley MicroStation CONNECT (10.16.0.80) is affected by CVE-2021-46594. The vulnerability is a DWG parsing buffer over-read caused by insufficient input validation, potentially allowing an attacker to disclose sensitive information and, in conjunction with other flaws, execute arbitrary code in ...

CVE-2021-46589

Bentley MicroStation CONNECT vulnerability CVE-2021-46589 involves a DGN file parsing flaw that can trigger an out-of-bounds read on an affected installation (MicroStation CONNECT 10.16.0.80). The issue stems from insufficient validation of user-supplied data and can allow an attacker to disclose...

CVE-2021-46615

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46615 due to a parsing flaw in BMP image handling. The root cause is inadequate validation of user-supplied data, leading to a read past the end of an allocated buffer, which can disclose sensitive information. In conjunction with ot...

CVE-2021-46616

Bentley MicroStation CONNECT 10.16.0.80 is affected by a BMP image parsing flaw that can cause an out-of-bounds read in the parsing code. The issue, triggered by processing a malicious BMP, allows disclosure of sensitive data and can enable arbitrary code execution in the context of the current p...

CVE-2021-46571

CVE-2021-46571 affects Bentley View 10.16.0.80. The vulnerability arises in the JT file parsing code, due to not validating the existence of an object before performing operations, enabling remote code execution in the attacker’s context. Exploitation requires user interaction (visiting a malicio...

CVE-2021-46588

CVE-2021-46588 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is a parsing flaw in JT files that leads to a use-after-free, enabling remote code execution. Exploitation requires user interaction (visit a malicious page or open a malicious file). Multiple connected sources (e.g., ZDI-2...

CVE-2021-46630

Bentley View 10.15.0.75 is affected by a vulnerability in FBX file parsing where improper validation can cause a read past the end of an allocated buffer. This enables information disclosure and, in conjunction with other vulnerabilities, could allow code execution in the current process. Exploit...

CVE-2021-46635

Bentley MicroStation CONNECT 10.16.0.80 is affected by a buffer overrun in the DGN file parser. Crafted DGN data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process after the user visits a malicious page or opens a maliciou...

CVE-2021-46633

CVE-2021-46633 affects Bentley MicroStation CONNECT 10.16.0.80. The root cause is improper validation of an object before operations during PDF parsing, enabling an attacker to execute arbitrary code in the current process. Requires user interaction (visiting a malicious page or opening a crafted...

CVE-2021-46644

Bentley MicroStation CONNECT 10.16.0.80 is affected by an out-of-bounds write vulnerability in DGN file parsing. The flaw allows remote code execution via crafted DGN data that triggers a write past the end of an allocated buffer; user interaction is required (visit a malicious page or open a mal...

CVE-2021-46566

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46566 due to a JT file parsing flaw. The vulnerability stems from uninitialized memory being accessed during parsing, enabling remote code execution when a user opens a malicious file or visits a malicious page. The issue allows code...

CVE-2021-46650

Bentley MicroStation CONNECT 10.16.0.80 has an out-of-bounds read in DGN file parsing due to insufficient input validation, allowing remote disclosure of data when a user opens a malicious file/page. Exploitation requires user interaction, and the issue reads beyond the allocated buffer. Document...

CVE-2021-46655

Bentley View 10.15.0.75 is affected by CVE-2021-46655. The flaw occurs in JT file parsing due to not validating the existence of an object before operations, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or ...

CVE-2021-46587

Bentley MicroStation CONNECT 3DS File Parsing Use-After-Free Remote Code Execution vulnerability (CVE-2021-46587) is described in connected sources as affecting MicroStation CONNECT with 3DS file parsing leading to a use-after-free condition due to the code not validating the existence of an obje...

CVE-2021-46611

CVE-2021-46611 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is a JP2 image parsing flaw caused by insufficient validation, leading to a read past the end of an allocated buffer. This can enable an attacker to disclose sensitive information and, per the CVE entry, may be leveraged (i...

CVE-2021-46654

Bentley View 10.15.0.75 is affected by a DGN file parsing flaw that can read past the end of an allocated buffer, enabling information disclosure. The issue requires user interaction (visiting a malicious page or opening a malicious file) and can be leveraged with other vulnerabilities to execute...

CVE-2021-46621

This CVE (CVE-2021-46621) affects Bentley MicroStation CONNECT 10.16.0.80 and is tied to parsing JT files. The root cause is a double-free/invalid object operation during JT file handling, leading to remote code execution when a user visits a malicious page or opens a crafted file. Exploitation r...

CVE-2021-46622

Bentley MicroStation CONNECT vulnerable to out-of-bounds read when parsing J2K files (CJ2K image parsing) in version 10.16.0.80. The flaw allows remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or opening a malicious fi...

CVE-2021-46651

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46651 due to an out-of-bounds read while parsing DGN files. The vulnerability stems from improper validation of user-supplied data, allowing a read past the end of an allocated buffer. This can lead to information disclosure and, in ...

CVE-2022-28311

Bentley MicroStation CONNECT 10.16.02.034 is affected by CVE-2022-28311 due to an out-of-bounds read in DXF file parsing, allowing remote code execution after user interaction (visiting a malicious page or opening a malicious file). The issue originates from crafted DXF data triggering a read pas...

CVE-2022-43653

CVE-2022-43653 affects Bentley View. The vulnerability is in SKP file parsing where crafted data can trigger a write past the end of an allocated buffer, enabling arbitrary code execution in the current process. Exploitation requires user interaction (target opens a malicious file or visits a mal...

CVE-2021-46580

CVE-2021-46580 affects Bentley MicroStation CONNECT. The issue is a JT file parsing use-after-free caused by not validating an object’s existence before operations, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The ...

CVE-2021-46602

In Bentley MicroStation CONNECT 10.16.0.80, CVE-2021-46602 is tied to a flaw in 3DS file parsing caused by improper validation of user-supplied data, resulting in a read past the end of an allocated buffer. This can disclose sensitive information and, in combination with other vulnerabilities, en...

CVE-2021-46606

CVE-2021-46606 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is a heap-based buffer overflow in BMP image parsing due to improper validation of the length of user-supplied data, allowing remote code execution. Attack requires user interaction (visiting a malicious page or opening a m...

CVE-2021-46609

Bentley MicroStation CONNECT 10.16.0.80 is affected by a PDF parsing vulnerability described in ZDI-22-196 and reflected in CVE-2021-46609. The flaw stems from not validating the existence of an object before performing operations on it inside PDF parsing, enabling a Use-After-Free condition that...

CVE-2021-46631

Bentley View 10.15.0.75 is affected by a remote code execution vulnerability in TIF image parsing. The root cause is uninitialized memory access during parsing, allowing an attacker to execute code in the process context when a user visits a malicious page or opens a crafted file. Multiple source...

CVE-2021-46617

CVE-2021-46617 affects Bentley MicroStation CONNECT 10.16.0.80. The vulnerability is in the parsing of TIF images and stems from the lack of proper initialization of memory prior to access, enabling an attacker to execute code in the context of the current process . This requires user interaction...

CVE-2022-28319

Bentley MicroStation CONNECT 10.16.02.034 is affected. The vulnerability originates from the 3DM file parser, where memory is not properly initialized before access, enabling arbitrary code execution. An attacker must lure a user to visit a malicious page or open a malicious file, after which cod...

CVE-2021-46613

CVE-2021-46613 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is a use-after-free in DXF file parsing caused by not validating the existence of an object before operations, enabling remote code execution. Exploitation requires user interaction (target visits a hostile page or opens a ...

CVE-2021-46623

Bentley View 10.15.0.75 is affected by a vulnerability in parsing of 3DS files. The issue stems from insufficient validation of user-supplied data, allowing a read past the end of an allocated buffer. This can enable an attacker to disclose sensitive information and, in conjunction with other vul...

CVE-2021-46596

Bentley MicroStation CONNECT 10.16.0.80 is affected by an OBJ file parsing flaw that can disclose sensitive information due to an out-of-bounds read in the parser. The issue stems from insufficient validation of user-supplied data, allowing read past the end of an allocated buffer. Exploitation r...

CVE-2021-46632

CVE-2021-46632 affects Bentley View 10.15.0.75. The bug resides in JP2 image parsing and stems from improper validation, causing a read past end of allocated buffer. This can enable information disclosure and, in conjunction with other flaws, may allow arbitrary code execution in the current proc...

CVE-2021-46600

Bentley MicroStation CONNECT 10.16.0.80 is affected. The vulnerability arises from improper validation in JT file parsing, leading to a read past the end of an allocated buffer (out-of-bounds read) and information disclosure. User interaction is required (visiting a malicious page or opening a ma...

CVE-2021-46624

Bentley View 10.15.0.75 is affected by a DWG file parsing vulnerability leading to a read past the end of an allocated buffer. The flaw arises from insufficient validation of user-supplied data, enabling an out-of-bounds read and, in combination with other issues, potential arbitrary code executi...

CVE-2021-46628

Summary: CVE-2021-46628 affects Bentley View; BMP image parsing flaw allows reading past end of a buffer, enabling information disclosure and potentially code execution in the context of the target process. The issue requires user interaction (target must visit a malicious page or open a maliciou...

CVE-2022-35906

Bentley MicroStation (before 10.17.0.x) and Bentley View (before 10.17.0.x) are affected. Opening a DGN file containing crafted data can trigger an out-of-bounds read during parsing, allowing an attacker to read information in the context of the current process. This aligns with reported CVE-2022...

CVE-2021-46567

CVE-2021-46567 concerns Bentley MicroStation CONNECT JT file parsing. The vulnerability arises from failing to validate object existence before operating on it, enabling a remote attacker to execute arbitrary code in the context of the affected process. User interaction is required (target must v...

CVE-2021-46597

Bentley MicroStation CONNECT 10.16.0.80 is affected by a vulnerability in JT file parsing (use-after-free) that allows remote code execution. The flaw stems from not validating object existence before operations; exploitation requires user interaction (visiting a malicious page or opening a malic...

CVE-2022-43652

Bentley View SKP File Parsing Use-After-Free Information Disclosure Vulnerability (CVE-2022-43652) affects Bentley View. The flaw is in the SKP file parser where the software fails to validate the existence of an object before operations, enabling information disclosure and potentially arbitrary ...

CVE-2021-46595

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46595. The vulnerability stems from improper validation in the parsing of 3DS files, causing a read past the end of an allocated buffer. This can be leveraged (in conjunction with other vulnerabilities) to execute arbitrary code in t...

CVE-2021-46618

CVE-2021-46618 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is a parsing flaw in PNG handling that leads to a read past the end of an allocated buffer due to insufficient validation of user-supplied data. Exploitation requires user interaction (target must visit a malicious page or ...

CVE-2021-46599

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46599. The issue is a PDF parsing flaw caused by insufficient validation that leads to a read past the end of an allocated buffer. This can disclose sensitive information and, in conjunction with other vulnerabilities, may allow arbi...

CVE-2021-46582

Bentley MicroStation CONNECT (versions including 10.16.0.80) is affected by a JP2 image parsing vulnerability. The flaw arises from not validating the existence of an object before performing operations on it, enabling use-after-free-like behavior that can lead to remote code execution. Exploitat...

CVE-2021-46578

Bentley MicroStation CONNECT JT file parsing vulnerability (CVE-2021-46578) is a use-after-free flaw that allows remote code execution. The issue arises in parsing JT files and stems from not validating the existence of an object before performing operations on it. Exploitation requires user inte...

CVE-2021-46627

CVE-2021-46627 – Bentley View : Affected product is Bentley View 10.15.0.75. The flaw is in DXF file parsing where code fails to validate the existence of an object before performing operations, enabling remote code execution. Exploitation requires user interaction (target visits a malicious page...

CVE-2021-46642

Bentley View 10.15.0.75 is affected by a DGN file parsing flaw that allows an out-of-bounds read, leading to information disclosure. The issue stems from insufficient validation of user-supplied data during DGN parsing, enabling a remote attacker to read past the end of an allocated buffer. Explo...