Description
An out-of-bounds read vulnerability exists in the RAWCodec::DecodeBytes functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted DICOM file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Grassroot DICOM | Grassroot DICOM | 3.0.23 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | gdcm | 3.0.24-1 | — |
| Debian 13 | gdcm | 3.0.24-1 | — |
| Debian 12 | gdcm | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | gdcm | No fix yet | — |
| Ubuntu 22.04 LTS | gdcm | No fix yet | — |
| Ubuntu 20.04 LTS | gdcm | No fix yet | — |
| Ubuntu 18.04 LTS | gdcm | No fix yet | — |
| Ubuntu 16.04 LTS | gdcm | No fix yet | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 14.04 LTS | gdcm | No fix yet | — |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | orthanc-gdcm | 1.7-1.1 | openSUSE-SU-2025:15546-1 |
| openSUSE Leap 16.0 | gdcm | 3.0.24-bp160.2.1 | openSUSE-SU-2026:20193-1 |
| openSUSE Leap 16.0 | orthanc | 1.12.10-bp160.1.1 | openSUSE-SU-2026:20193-1 |
| openSUSE Leap 16.0 | orthanc-authorization | 0.10.3-bp160.1.1 | openSUSE-SU-2026:20193-1 |
| openSUSE Leap 16.0 | orthanc-dicomweb | 1.22-bp160.1.1 | openSUSE-SU-2026:20193-1 |
| openSUSE Leap 16.0 | orthanc-gdcm | 1.8-bp160.1.1 | openSUSE-SU-2026:20193-1 |
| openSUSE Leap 16.0 | orthanc-indexer | 1.0-bp160.2.1 | openSUSE-SU-2026:20193-1 |
| openSUSE Leap 16.0 | orthanc-mysql | 5.2-bp160.2.1 | openSUSE-SU-2026:20193-1 |
| openSUSE Leap 16.0 | orthanc-neuro | 1.1-bp160.2.1 | openSUSE-SU-2026:20193-1 |
| openSUSE Leap 16.0 | orthanc-postgresql | 10.0-bp160.1.1 | openSUSE-SU-2026:20193-1 |
| openSUSE Leap 16.0 | orthanc-python | 7.0-bp160.1.1 | openSUSE-SU-2026:20193-1 |
| openSUSE Leap 16.0 | orthanc-stl | 1.2-bp160.2.1 | openSUSE-SU-2026:20193-1 |
| openSUSE Leap 16.0 | orthanc-tcia | 1.3-bp160.1.1 | openSUSE-SU-2026:20193-1 |
| openSUSE Leap 16.0 | orthanc-wsi | 3.3-bp160.1.1 | openSUSE-SU-2026:20193-1 |
| openSUSE Leap 16.0 | python-pyorthanc | 1.22.1-bp160.1.1 | openSUSE-SU-2026:20193-1 |
Advisories 2
- openSUSE-SU-2026:20193-1 Security update for orthanc, gdcm, orthanc-authorization, orthanc-dicomweb, orthanc-gdcm, orthanc-indexer, orthanc-mysql, orthanc-neuro, orthanc-postgresql, orthanc-python, orthanc-stl, orthanc-tcia, orthanc-wsi, python-pyorthanc SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:15546-1 orthanc-gdcm-1.7-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2024-1944
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N5HXUKUJ7SG3TK456SGUWVZ4Z5D7JKOL/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJA7QWWZWMY4AQFR35EA7S3CFVUTOQYG/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZJ4IG7EXMSMPHTK5ZFASCW6MHSOVZOE/