Out-of-bounds Read vulnerability in Merge DICOM Toolkit C/C++ on Windows
Published May 3, 2024
4.0
MEDIUMCVSS 3.1
EPSS 0.19%
Description
Out-of-bounds Read vulnerability in Merge DICOM Toolkit C/C++ on Windows.
When MC_Open_File() function is used to read a malformed DICOM data, it might result in over-reading memory buffer and could cause memory access violation.
Affected products
-
Affected
- ≥ v5.0.0, ≤ v5.17.0
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Merative | Merge DICOM Toolkit C/C++ | unaffected | Affected
|
No data.
-
Affected
- ≥ v5.0.0, ≤ 5.17.0
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Merative | Merge Dicom Toolkit C C\+\+ | unknown | Affected
|
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
The issue is resolved in Merge DICOM Toolkit 5.18.0 release.
References (2)
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
Red Hat
No data
GitHub
No data