CVE-2024-52333 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Dcmtk
Severity
7.8HIGHNVD
EPSS
0.1%
top 81.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 13
Latest updateJan 29
Description
An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages3 packages
Patches
🔴Vulnerability Details
2📋Vendor Advisories
1Debian▶
CVE-2024-52333: dcmtk - An improper array index validation vulnerability exists in the determineMinMax f...↗2024