Description
In Santesoft Sante FFT Imaging versions 1.4.1 and prior once a user opens a malicious DCM file on affected FFT Imaging installations, a local attacker could perform an out-of-bounds write, which could allow for arbitrary code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Santesoft | Sante FFT Imaging | ≤ 1.4.1 | — |
Advisories 1
- ICSMA-24-065-01 Santesoft Sante FFT Imaging CISA ICS & IT advisories · Mar 5, 2024