Beveiligingsadvies

CVE-2025-53619

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-16 21:32:55
Laatst bijgewerkt 2025-12-17 18:49:53
Toegewezen door talos
CVSS-score 7.4
Status PUBLISHED

Beschrijving

An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.The function `null_convert` is called based of the value of the malicious DICOM file specifying the intended interpretation of the image pixel data