CVE-2024-23912

Summary

Out-of-bounds Read vulnerability in Merge DICOM Toolkit C/C++ on Windows.

When MC_Open_File() function is used to read a malformed DICOM data, it might result in over-reading memory buffer and could cause memory access violation.

Affected Software

Weaknesses

• CWE-125: CWE-125 Out-of-bounds Read

Workarounds

As a temporary solution, until a patch is released, it is highly recommended to provide to the MC_Open_File() function only trusted DICOM files.

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23912

References

• https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23912

• ←Previous
• Next→