high8.4
CVE-2024-52333
An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8.
Impact
An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Offis | Dcmtk | Version 3.6.8 |
Weakness classification
References
- NVD record
- CVE.org record
- https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=03e851b0586d05057c3268988e180ffb426b2e03
- https://talosintelligence.com/vulnerability_reports/TALOS-2024-2121
- https://lists.debian.org/debian-lts-announce/2025/01/msg00032.html
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2121