Description
Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker-controlled heap out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Medixant | RadiAnt DICOM | ≤ 2025.2 | 2026.1 |
Advisories 1
- ICSMA-26-218-01 Medixant RadiAnt DICOM CISA ICS & IT advisories · Aug 6, 2026