Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.3
CVE-2022-35900: An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open a JP2 file co...
CVE-2022-35900 · published 4 years ago
Summary
An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open a JP2 file containing crafted data can force an out-of-bounds read. Exploitation of these vulnerabilities within the...
What to do
- Update bentley microstation to version 10.17.0 or later.
- Update bentley view to version 10.17.0 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| bentley | microstation |
< 10.17.0 cpe:2.3:a:bentley:microstation:*:*:*:*:*:*:*:* |
| bentley | view |
< 10.17.0 cpe:2.3:a:bentley:view:*:*:*:*:*:*:*:* |
Original advisory text
An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open a JP2 file co...
An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open a JP2 file containing crafted data can force an out-of-bounds read. Exploitation of these vulnerabilities within the parsing of JP2 files could enable an attacker to read information in the context of the current process.
References
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-125Out-of-bounds Read
Timeline
Published15 Jul 2022
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2022-35900 · NVD
Track software like this
Free during beta