CVE-2022-35906

Name of the Vulnerable Software and Affected Versions Bentley MicroStation versions prior to 10.17.0.x Bentley View versions prior to 10.17.0.x

Description An issue was discovered that allows an out-of-bounds read when opening a DGN file containing crafted data with an affected version of MicroStation or a MicroStation-based application. This could enable an attacker to read information in the context of the current process during the parsing of DGN files.

Recommendations For Bentley MicroStation versions prior to 10.17.0.x, update to version 10.17.0.x or later to resolve the issue. For Bentley View versions prior to 10.17.0.x, update to version 10.17.0.x or later to resolve the issue.