CVE-2021-34985

CVE-2021-34985 is a medium-severity information disclosure vulnerability affecting Bentley ContextCapture 10.18.0.232. The flaw, stemming from improper validation during OBJ file parsing, allows a remote attacker to read past the end of a buffer, potentially disclosing sensitive information. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. While it can be chained with other vulnerabilities for arbitrary code execution, there is currently no public exploit code, active exploitation, or significant community discussion surrounding this CVE.