CVE-2019-5090

HIGH

LEADTOOLS libltdic.so <20.0.2019.3.15 - Info Disclosure

Title source: llm
STIX 2.1

Description

An exploitable information disclosure vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version 20.0.2019.3.15. A specially crafted packet can cause an out-of-bounds read, resulting in information disclosure. An attacker can send a packet to trigger this vulnerability.

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.0031
EPSS Percentile 54.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-125
Status published
Products (1)
leadtools/leadtools 20.0.2019.3.15
Published Dec 12, 2019
Tracked Since Feb 18, 2026