Skip to content
OpenAdvisories
Medium · 5.7 CVE-2024-23914 EUVD-2024-21344GHSA-2gh9-f6jf-23hq

Use of Externally-Controlled Format String vulnerability in Merge DICOM Toolkit C/C++ on Windows. When MC_Open_Association() function is us…

Published May 3, 2024 · Updated Aug 1, 2024 · Assigned by Nozomi

Description

Use of Externally-Controlled Format String vulnerability in Merge DICOM Toolkit C/C++ on Windows.

When MC_Open_Association() function is used to open DICOM Association and gets DICOM Application Context Name with illegal characters, it might result in an unhandled exception.

Affected products

VendorProductAffectedFixed
Merative Merge DICOM Toolkit C/C++ v5.6.0 – ≤ v5.17.0 —

References