Security Advisory

CVE-2024-22373

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-04-25 14:33:07
Last updated 2025-11-04 17:14:17
Assigner talos
State PUBLISHED

Description

An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted DICOM file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.