CVE-2022-35902: Low severity bentley microstation vulnerability
An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open an OBJ file containing crafted data can force an out-of-bounds read. Exploitation of these vulnerabilities within the parsing of OBJ files could enable an attacker to read information in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-35902?
CVE-2022-35902 is an issue discovered in Bentley MicroStation and Bentley View that can cause an out-of-bounds read when opening a crafted OBJ file.
How does CVE-2022-35902 impact Bentley MicroStation and Bentley View?
CVE-2022-35902 can lead to an out-of-bounds read in Bentley MicroStation and Bentley View when opening a specially crafted OBJ file.
What is the severity of CVE-2022-35902?
The severity of CVE-2022-35902 is low, with a CVSS v3 score of 3.3.
How can I fix CVE-2022-35902 in Bentley MicroStation and Bentley View?
To fix CVE-2022-35902, it is recommended to update Bentley MicroStation and Bentley View to version 10.17.0.x or higher.
Where can I find more information about CVE-2022-35902?
More information about CVE-2022-35902 can be found at the following link: [CVE-2022-35902](https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0016)