CVE-2024-22391

Name of the Vulnerable Software and Affected Versions Mathieu Malaterre Grassroot DICOM version 3.0.23

Description A heap-based buffer overflow issue exists in the LookupTable::SetLUT functionality. This can be triggered by a specially crafted malformed file, leading to memory corruption. An attacker can exploit this by providing a malicious file.

Recommendations For Mathieu Malaterre Grassroot DICOM version 3.0.23, avoid using the LookupTable::SetLUT functionality with untrusted files until a patch is available. As a temporary workaround, consider restricting the use of this functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.