CVE-2024-23914

2024-05-0308:15:32

CWE-134

Nozomi

raw.githubusercontent.com

merge dicom toolkit

c/c++

windows

external control

format string

mc_open_association

unhandled exception

dicom association

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%

JSON

Use of Externally-Controlled Format String vulnerability in Merge DICOM Toolkit C/C++ on Windows.

When MC_Open_Association() function is used to open DICOM Association and gets DICOM Application Context Name with illegal characters, it might result in an unhandled exception.