CVE-2024-22100

HIGH

MicroDicom DICOM Viewer <2023.3 (Build 9342) - Buffer Overflow

Title source: llm
STIX 2.1

Description

MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior are affected by a heap-based buffer overflow vulnerability, which could allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. A user must open a malicious DCM file in order to exploit the vulnerability.

References (1)

Core 1

Scores

CVSS v3 7.8
EPSS 0.0003
EPSS Percentile 8.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-122 CWE-787
Status published
Products (1)
microdicom/dicom_viewer < 2024.1
Published Mar 01, 2024
Tracked Since Feb 18, 2026