Skip to content
OpenAdvisories
Low · 3.3 CVE-2022-35901 EUVD-2022-38774GHSA-mqfp-m4wv-8hv5

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStati…

Published Jul 15, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open a J2K file containing crafted data can force an out-of-bounds read. Exploitation of these vulnerabilities within the parsing of J2K files could enable an attacker to read information in the context of the current process.

References