Lucene search

K
nvd[email protected]NVD:CVE-2024-23913
HistoryMay 03, 2024 - 9:15 a.m.

CVE-2024-23913

2024-05-0309:15:07
web.nvd.nist.gov
4
use of out-of-range pointer offset
deprecated function
memory access violation
dicom xml file
windows

CVSS3

4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

4.2

Confidence

High

EPSS

0

Percentile

9.0%

Use of Out-of-range Pointer Offset vulnerability in Merge DICOM Toolkit C/C++ on Windows.

When deprecated MC_XML_To_Message() function is used to read a malformed DICOM XML file, it might result in memory access violation.

CVSS3

4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

4.2

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-23913