Skip to content
OpenAdvisories
Medium · 4.0 CVE-2024-23913 EUVD-2024-21343GHSA-894r-53rj-2h7x

Use of Out-of-range Pointer Offset vulnerability in Merge DICOM Toolkit C/C++ on Windows. When deprecated MC_XML_To_Message() function is u…

Published May 3, 2024 · Updated Dec 6, 2024 · Assigned by Nozomi

Description

Use of Out-of-range Pointer Offset vulnerability in Merge DICOM Toolkit C/C++ on Windows.

When deprecated MC_XML_To_Message() function is used to read a malformed DICOM XML file, it might result in memory access violation.

Affected products

VendorProductAffectedFixed
Merative Merge DICOM Toolkit C/C++ v5.0.0 – ≤ v5.17.0 —

References