CVE-2022-35902

Name of the Vulnerable Software and Affected Versions Bentley MicroStation versions prior to 10.17.0.x Bentley View versions prior to 10.17.0.x

Description An issue was discovered in the parsing of OBJ files, which can force an out-of-bounds read when an affected version of MicroStation or MicroStation-based application is used to open a crafted OBJ file. This could enable an attacker to read information in the context of the current process.

Recommendations For Bentley MicroStation versions prior to 10.17.0.x, update to version 10.17.0.x or later to resolve the issue. For Bentley View versions prior to 10.17.0.x, update to version 10.17.0.x or later to resolve the issue. As a temporary workaround, consider avoiding the use of OBJ files with affected versions of MicroStation or MicroStation-based applications until a patch is available.