CVE-2024-22100
MicroDicom DICOM Heap-based Buffer Overflow
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
MicroDicom DICOM Heap-based Buffer Overflow
| Assigner | icscert |
| Reserved | 2024-02-12 |
| Published | 2024-03-01 |
| Updated | 2024-08-12 |
MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior are affected by a heap-based buffer overflow vulnerability, which could allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. A user must open a malicious DCM file in order to exploit the vulnerability.
| CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Michael Heinzl reported these vulnerabilities to CISA.
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-060-01
