Vendor
J4Care
6 known vulnerabilities.
Products
4 results · Clear filters · Feed
-
High 7.5
J4Care dcm4che Missing Authentication for Critical Function
In the default configuration, the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the sending application. A remote sender can reassign studies and related workflow records from one patient identity to another. The archive's unmerge…
-
High 7.5
J4Care dcm4che Inefficient Algorithmic Complexity
MultipartInputStream performs inefficient boundary matching and unnecessary buffer copying. Crafted multipart input can force excessive boundary comparisons and repeated copying.
-
High 7.5
J4Care dcm4che Loop with Unreachable Exit Condition
MP4Parser does not adequately validate MP4 box sizes. A malformed box can cause parsing to make no forward progress and repeatedly process the same input.
-
High 7.5
J4Care dcm4che Loop with Unreachable Exit Condition
JPEGParser can enter an infinite loop while parsing a specially crafted or truncated stream.