NetSight
IP …
medium6.5

CVE-2024-25569

An out-of-bounds read vulnerability exists in the RAWCodec::DecodeBytes functionality of Mathieu Malaterre Grassroot DICOM 3.0.23.

Impact

An out-of-bounds read vulnerability exists in the RAWCodec::DecodeBytes functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted DICOM file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

VendorProductAffected versions
MalaterreGrassroots Dicom
Version 3.0.23
FedoraprojectFedora
Versions 38, 39, 40

Weakness classification

CWE-125

References