CVE-2024-23913

Summary

Use of Out-of-range Pointer Offset vulnerability in Merge DICOM Toolkit C/C++ on Windows.

When deprecated MC_XML_To_Message() function is used to read a malformed DICOM XML file, it might result in memory access violation.

Affected Software

Weaknesses

• Use of Out-of-range Pointer Offset

Workarounds

As a temporary solution, until a patch is released, it is highly recommended to provide to the MC_XML_To_Message() function only trusted XML files.

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23913

References

• https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23913

• ←Previous
• Next→