NetSight
high7.8

CVE-2023-5059

Santesoft Sante FFT Imaging lacks proper validation of user-supplied data when parsing DICOM files.

Impact

Santesoft Sante FFT Imaging lacks proper validation of user-supplied data when parsing DICOM files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.

Affected products

VendorProductAffected versions
SantesoftFft Imaging
before 1.4.1

Weakness classification

References