EXPOSURES › CVE-2024-22373
CVE-2024-22373
HIGH
DETAIL
SourceNVD · cve
Published2024-04-25
CVSS8.1
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2024-22373 ↗
▸ RECOMMENDED ACTION Patch the affected products and confirm your instances are covered.
PLAYERS IMPLICATED
DESCRIPTION
An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted DICOM file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.