CVE-2022-35904

Name of the Vulnerable Software and Affected Versions Bentley MicroStation versions prior to 10.17.0.x Bentley View versions prior to 10.17.0.x

Description An issue was discovered in the affected software. Using an affected version to open an IFC file containing crafted data can force an out-of-bounds read. Exploitation of this issue within the parsing of IFC files could enable an attacker to read information in the context of the current process.

Recommendations For Bentley MicroStation versions prior to 10.17.0.x, update to version 10.17.0.x or later. For Bentley View versions prior to 10.17.0.x, update to version 10.17.0.x or later. As a temporary workaround, consider avoiding the use of IFC files from untrusted sources until a patch is applied.