CVE-2015-8396

🗓️ 12 Jan 2016 20:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 57 Views🌐 WEB

CVE-2015-8396 Integer overflow in ImageRegionReader::ReadIntoBuffer function in GDCM before 2.6.2 allows arbitrary code execution via crafted DICOM image file

Reporter	Title	Published	Views	Family All 13
0day.today	Grassroots DICOM (GDCM) 2.6.0 and 2.6.1 - ImageRegionReader::ReadIntoBuffer Buffer Overflow	12 Jan 201600:00	–	zdt
CNVD	Grassroots DICOM (GDCM) Buffer Overflow Vulnerability	13 Jan 201600:00	–	cnvd
Cvelist	CVE-2015-8396	12 Jan 201620:00	–	cvelist
Debian CVE	CVE-2015-8396	12 Jan 201620:00	–	debiancve
Exploit DB	Grassroots DICOM (GDCM) 2.6.0 and 2.6.1 - ImageRegionReader::ReadIntoBuffer Buffer Overflow	12 Jan 201600:00	–	exploitdb
exploitpack	Grassroots DICOM (GDCM) 2.6.0 and 2.6.1 - ImageRegionReader::ReadIntoBuffer Buffer Overflow	12 Jan 201600:00	–	exploitpack
Tenable Nessus	FreeBSD : gdcm -- multiple vulnerabilities (e00d8b94-c88a-11e5-b5fe-002590263bf5)	1 Feb 201600:00	–	nessus
NVD	CVE-2015-8396	12 Jan 201620:59	–	nvd
OSV	DEBIAN-CVE-2015-8396	12 Jan 201620:59	–	osv
OSV	UBUNTU-CVE-2015-8396	12 Jan 201620:59	–	osv

NVD

Node

malaterre grassroots_dicomRange≤2.6.0

malaterre grassroots_dicomMatch2.6.1

Source	Link
sourceforge	www.sourceforge.net/p/gdcm/gdcm/ci/e547b1ded3fd21e0b0ad149f13045aa12d4b9b7c/
seclists	www.seclists.org/fulldisclosure/2016/Jan/29
exploit-db	www.exploit-db.com/exploits/39229/
census-labs	www.census-labs.com/news/2016/01/11/gdcm-buffer-overflow-imageregionreaderreadintobuffer/
packetstormsecurity	www.packetstormsecurity.com/files/135205/GDCM-2.6.0-2.6.1-Integer-Overflow.html
sourceforge	www.sourceforge.net/p/gdcm/mailman/message/34687533/
sourceforge	www.sourceforge.net/p/gdcm/mailman/message/34670701/
securityfocus	www.securityfocus.com/archive/1/537264/100/0/threaded

Parameter	Position	Path	Description	CWE
input-file	path	/news/2016/01/11/gdcm-buffer-overflow-imageregionreaderreadintobuffer/	Integer overflow in ImageRegionReader::ReadIntoBuffer can cause a buffer overflow when processing crafted DICOM images.	CWE-189
input-file	path	/media/CVE-2015-8396.dcm.bz2	Potential to trigger overflow/exploit via a crafted DICOM file used as input to the library.	CWE-189
input-file	path	/html/ExtractImageRegion_8cs-example.html	Reference example demonstrating image region extraction that relates to the vulnerability context.	CWE-189
input-file	path	/exploitdb-bin-sploits/raw/master/bin-sploits/39229.zip	Exploit package reference related to the disclosed vulnerability.	CWE-189

17 Jun 2026 00:34Current

9.3High risk

Vulners AI Score9.3

CVSS 310

CVSS 210

EPSS0.16803

CWE-189