CVE-2024-34509

2024-05-0520:15:07

Google

osv.dev

dcmtk

dcmdata

segmentation fault

invalid dimse message

software

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.

CPENameOperatorVersion
dcmtkeqDCMTK-3.6.1_20121102
dcmtkeqDCMTK-3.6.1_20110519
dcmtkeqDCMTK-3.3.0
dcmtkeqDCMTK-3.6.4
dcmtkeqDCMTK-3.3.1
dcmtkeqDCMTK-3.6.1_20150924
dcmtkeqDCMTK-3.6.1_20140617
dcmtkeqDCMTK-3.5.2
dcmtkeqDCMTK-3.6.1_20160216
dcmtkeqDCMTK-3.6.1_20160630

Name	Operator	Version
dcmtk	eq	DCMTK-3.6.1_20121102
dcmtk	eq	DCMTK-3.6.1_20110519
dcmtk	eq	DCMTK-3.3.0
dcmtk	eq	DCMTK-3.6.4
dcmtk	eq	DCMTK-3.3.1
dcmtk	eq	DCMTK-3.6.1_20150924
dcmtk	eq	DCMTK-3.6.1_20140617
dcmtk	eq	DCMTK-3.5.2
dcmtk	eq	DCMTK-3.6.1_20160216
dcmtk	eq	DCMTK-3.6.1_20160630