Skip to content
OpenAdvisories

Vendor

J4Care

6 known vulnerabilities.

4 results · Clear filters · Feed

  • High 7.5

    J4Care dcm4che Missing Authentication for Critical Function

    In the default configuration, the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the sending application. A remote sender can reassign studies and related workflow records from one patient identity to another. The archive's unmerge…

  • High 7.5

    J4Care dcm4che Inefficient Algorithmic Complexity

    MultipartInputStream performs inefficient boundary matching and unnecessary buffer copying. Crafted multipart input can force excessive boundary comparisons and repeated copying.

  • High 7.5

    J4Care dcm4che Loop with Unreachable Exit Condition

    MP4Parser does not adequately validate MP4 box sizes. A malformed box can cause parsing to make no forward progress and repeatedly process the same input.

  • High 7.5

    J4Care dcm4che Loop with Unreachable Exit Condition

    JPEGParser can enter an infinite loop while parsing a specially crafted or truncated stream.