CVE-2015-8397

The JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows remote attackers to…

published January 12, 2016

CVSS
—
EPSS
4%
Percentile
89.4
In the wild
Unconfirmed
What it is

The JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (application crash) via an embedded JPEG-LS image with dimensions larger than the selected region in a (1) two-dimensional or (2) three-dimensional DICOM image file, which triggers an out-of-bounds read.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03609 · 89.4th percentile
Published
2016-01-12T20:00Z
EPSS history
Timeline
  • 12 JAN 20:00Z
    The JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows remote attackers to…
    cvelistv5