CVE-2021-34882

Vulnerability

This vulnerability [1][2] is an out-of-bounds read in the JP2 file parsing component of Bentley View 10.15.0.75. The issue arises because the application fails to properly validate user-supplied data when parsing JP2 files, resulting in a read past the end of an allocated buffer. Affected versions include Bentley View prior to 10.16.02.*, as noted in the vendor advisory [2].

Exploitation

Exploitation requires user interaction [1]: the target must visit a malicious page or open a specially crafted JP2 file. No authentication is required, but the attacker needs to deliver the malicious file to the victim (e.g., via email, social engineering, or hosting on a website). The attack complexity is low, and the vector is local (the user opens the file locally) [1][2].

Impact

A successful exploit allows an attacker to disclose sensitive information from the process memory [1][2]. Although the direct impact is limited to information disclosure (CVSS base score 3.3, AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N [1]), the vendor advisory notes that an attacker could leverage this out-of-bounds read in conjunction with other vulnerabilities to achieve arbitrary code execution in the context of the current process [1][2].

Mitigation

Bentley has released mitigated versions: Bentley View 10.16.02.* and more recent [2]. Users should update to the latest version. As a general best practice, only open JP2 files from trusted sources [2]. If upgrading is not immediately possible, avoid opening untrusted JP2 files.