CVE-2020-6152CWE-252

A code execution vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.7

Critical · published September 1, 2020

CVSS v3.0
9.8
EPSS
2%
Percentile
80.0
In the wild
Unconfirmed
What it is

A code execution vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause an out-of-bounds write. An attacker can trigger this vulnerability by providing a victim with a malicious DICOM file.

The record
Technical detail
CVSS v3.0
9.8 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01943 · 80.0th percentile
Weakness
CWE-252 · Unchecked Return Value
Published
2020-09-01T20:54Z
EPSS history
Timeline
  • 01 SEP 20:54Z
    A code execution vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.7
    cvelistv5