Skip to content
OpenAdvisories
High · 7.8 CVE-2023-39431 EUVD-2023-43155GHSA-h8wx-v5rf-mxrf

Santesoft Sante DICOM Viewer Pro Out-of-bounds Write

Published Oct 19, 2023 · Updated Jan 16, 2025 · Assigned by icscert

Description

Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.

Affected products

VendorProductAffectedFixed
Santesoft Sante DICOM Viewer Pro ≤ 12.2.4 —

Advisories 1

References