CVE-2026-22879

Summary

A heap-based buffer overflow vulnerability exists in the vtkDICOMItem::FindDataElementOrInsert functionality of vtk-dicom (version(s): 9.5.2). A specially crafted DICOM file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

Weaknesses

• CWE-129: CWE-129: Improper Validation of Array Index

ADP Enrichment

CVE Program Container

Additional References

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2366

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2026-2366

• ←Previous
• Next→