CVE-2024-23913

Use of Out-of-range Pointer Offset vulnerability in Merge DICOM Toolkit C/C++ on Windows

Medium · published May 3, 2024

CVSS v3.1
4.0
EPSS
0%
Percentile
8.5
In the wild
Unconfirmed
What it is

Use of Out-of-range Pointer Offset vulnerability in Merge DICOM Toolkit C/C++ on Windows.

When deprecated MC_XML_To_Message() function is used to read a malformed DICOM XML file, it might result in memory access violation.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00193 · 8.5th percentile
Published
2024-05-03T08:15Z
EPSS history
Timeline
  • 03 MAY 08:15Z
    Use of Out-of-range Pointer Offset vulnerability in Merge DICOM Toolkit C/C++ on Windows
    cvelistv5