CVE-2024-47796
An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to...
Original description
The description as published by the source.
An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-47796 dcmtk Fixed in: 3.6.5-1+deb11u4
- Ubuntu UBUNTU-CVE-2024-47796 dcmtk
References
- advisory github.com
- advisory nvd.nist.gov
- web git.dcmtk.org
- web lists.debian.org
- web lists.debian.org
- web talosintelligence.com
- web talosintelligence.com