High · published December 17, 2025
⚡ An out-of-bounds read vulnerability lurks in Grassroot DICOM 3.024, waiting for a crafted DICOM file to leak sensitive memory data! 🔍 Think of this as a delivery service accidentally opening a package that contains someone else's sensitive documents—if they peek inside, they might reveal personal information they shouldn’t! 📦 An attacker could exploit this vulnerability to extract sensitive heap data from the server, potentially leading to unauthorized access to confidential information—talk about an uninvited guest at a private party! 🚨 This could have serious implications for data privacy and integrity.
Think of this as a delivery service accidentally opening a package that contains someone else's sensitive documents—if they peek inside, they might reveal personal information they shouldn’t! 📦 This vulnerability allows an attacker to provide a specially crafted DICOM file that triggers out-of-bounds reading in the RLECodec::DecodeByStreams functionality, causing the application to expose memory contents it should not share.
An attacker could exploit this vulnerability to extract sensitive heap data from the server, potentially leading to unauthorized access to confidential information—talk about an uninvited guest at a private party! 🚨 This could have serious implications for data privacy and integrity. To protect against this vulnerability, immediately update to the latest version of Grassroot DICOM that patches this issue. In the meantime, ensure that proper input validation and stringent file handling practices are enforced to mitigate risks. 🛡️ You’ve got this! With these steps, you can secure your application and keep that memory data safe! 💪😊
| Product | Versions | Fixed in |
|---|---|---|
| malaterre/grassroots_dicom | all versions | — |