Siemens Syngo FastView Out-of-Bounds Writing Vulnerability (CNVD-2022-56511)

Siemens Syngo FastView is a standalone viewer of Dicom 2 images available on Dicom exchange media from Siemens, Germany. An out-of-bounds write vulnerability exists in Siemens Syngo FastView, which stems from a lack of proper validation of user-supplied data when parsing BMP files. An attacker could exploit this vulnerability to execute code in the context of the current process.