NetSight
IP …
high8.1

CVE-2024-22373

An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23.

Impact

An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted DICOM file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

VendorProductAffected versions
MalaterreGrassroots Dicom
Version 3.0.23
FedoraprojectFedora
Versions 38, 39, 40

Weakness classification

CWE-119CWE-787

References