CVE-2022-35900

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open a JP2 file containing crafted data can force an out-of-bounds read. Exploitation of these vulnerabilities within the parsing of JP2 files could enable an attacker to read information in the context of the current process.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:bentley:microstation:*:*:*:*:*:*:*:*
cpe:2.3:a:bentley:view:*:*:*:*:*:*:*:*

History

21 Jul 2022, 14:42

Type Values Removed Values Added
References (MISC) https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0015 - (MISC) https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0015 - Vendor Advisory
First Time Bentley view
Bentley microstation
Bentley
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 3.3
CWE CWE-125
CPE cpe:2.3:a:bentley:view:*:*:*:*:*:*:*:*
cpe:2.3:a:bentley:microstation:*:*:*:*:*:*:*:*

15 Jul 2022, 23:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-07-15 23:15

Updated : 2023-12-10 14:35


NVD link : CVE-2022-35900

Mitre link : CVE-2022-35900

CVE.ORG link : CVE-2022-35900


JSON object : View

Products Affected

bentley

  • view
  • microstation
CWE
CWE-125

Out-of-bounds Read