CVE-2019-5092CWE-787

An exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image format of LEADTOOLS 20.0.2019.3.15

High · published December 11, 2019

CVSS v3.0
8.8
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

An exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image format of LEADTOOLS 20.0.2019.3.15. A specially crafted DICOM image can cause an offset beyond the bounds of a heap allocation to be written, potentially resulting in code execution. An attacker can specially craft a DICOM image to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02456 · 84.3th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2019-12-11T23:47Z
EPSS history
Timeline
  • 11 DEC 23:47Z
    An exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image format of LEADTOOLS 20.0.2019.3.15
    cvelistv5