PT-2019-17466

CVE-2019-5085

·

Published

2019-12-11

·

Updated

2022-06-17

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions LEADTOOLS libltdic.so version 20.0.2019.3.15
Description A code execution issue exists in the DICOM packet-parsing functionality. It can be triggered by a specially crafted packet, causing an integer overflow that results in heap corruption.
Recommendations For version 20.0.2019.3.15, consider restricting access to the DICOM packet-parsing functionality until a patch is available. As a temporary workaround, avoid processing untrusted or unknown DICOM packets to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾