CVE-2022-35901

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x

Low · published July 15, 2022

CVSS v3.1
3.3
EPSS
0%
Percentile
10.0
In the wild
Unconfirmed
What it is

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open a J2K file containing crafted data can force an out-of-bounds read. Exploitation of these vulnerabilities within the parsing of J2K files could enable an attacker to read information in the context of the current process.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AC:L/AV:L/A:N/C:L/I:N/PR:N/S:U/UI:R
CVSS v4.0
Not supplied
EPSS
0.00205 · 10.0th percentile
Published
2022-07-15T22:40Z
EPSS history
Timeline
  • 15 JUL 22:40Z
    An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x
    cvelistv5