High · published December 17, 2025
⚡ A specially crafted DICOM file could expose sensitive information through an out-of-bounds read! This vulnerability lurking in Grassroot DICOM 3.024 is no small fry! 🔥 Think of it like a restaurant that only checks the first few dishes on a menu. If a rogue chef sneaks in a harmful recipe, it can lead to a disastrous dinner party where hidden ingredients spoil the meal! An attacker could exploit this vulnerability to leak sensitive information from the application, potentially exposing patient data that should remain confidential. This could lead to serious privacy violations and loss of trust in the system.
Think of it like a restaurant that only checks the first few dishes on a menu. If a rogue chef sneaks in a harmful recipe, it can lead to a disastrous dinner party where hidden ingredients spoil the meal! The out-of-bounds read vulnerability in the JPEGBITSCodec::InternalCode function allows an attacker to supply a malicious DICOM file triggering the `grayscale_convert` function incorrectly, resulting in unintended information disclosure.
An attacker could exploit this vulnerability to leak sensitive information from the application, potentially exposing patient data that should remain confidential. This could lead to serious privacy violations and loss of trust in the system. To fix this, immediately update to the latest version of Grassroot DICOM that addresses this issue. Review your DICOM file handling and ensure strict validation of input files to prevent such attacks. Regularly audit your software for vulnerabilities! You've got this! By taking quick action, you can keep your systems secure and protect patient data like a pro! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| malaterre/grassroots_dicom | all versions | — |