CVE-2024-1696 Santesoft Sante FFT Imaging Out-of-bounds Write

In Santesoft Sante FFT Imaging versions 1.4.1 and prior once a user opens a malicious DCM file on affected FFT Imaging installations, a local attacker could perform an out-of-bounds write, which could allow for arbitrary code execution...

CVE-2024-1696

SanteSoft Sante FFT Imaging (versions 1.4.1 and prior) is affected by CVE-2024-1696. When a user opens a malicious DCM file, an out-of-bounds write can occur, enabling arbitrary code execution via a local attack. Impact is documented as High (C/H, I/H, A/H) with local attack vector and user inter...

PT-2024-18231 · Santesoft · Sante Fft Imaging

Name of the Vulnerable Software and Affected Versions: Santesoft Sante FFT Imaging versions 1.4.1 and prior Description: The issue allows a local attacker to perform an out-of-bounds write, potentially enabling arbitrary code execution, when a user opens a malicious DCM file on affected...

Santesoft Sante FFT Imaging Buffer Error Vulnerability

Santesoft Sante FFT Imaging is an application from Santesoft that removes pattern noise from DICOM and normal images jpg, tif, png, and bmp. A buffer error vulnerability exists in Santesoft Sante FFT Imaging version 1.4.1 and prior versions, which stems from allowing out-of-bounds writes. An...

Santesoft Sante FFT Imaging

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Santesoft Equipment : Sante FFT Imaging Vulnerability : Out-of-Bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a local attacker to execute arbitrary code once a user...

PT-2024-18058 · Unknown · Sante Dicom Viewer Pro

Name of the Vulnerable Software and Affected Versions: Sante DICOM Viewer Pro versions 14.0.3 and prior Description: A local attacker could disclose information or execute arbitrary code by opening a malicious DICOM file. Recommendations: For versions 14.0.3 and prior, avoid opening untrusted or...

DICOM Connectivity Framework Security Vulnerability

The DICOM Connectivity Framework is an advanced, object-oriented collection of native software components that implements the DICOM protocol for medical imaging systems. A security vulnerability exists in DICOM Connectivity Framework prior to version v.2.7.6b, which stems from a directory travers...

CVE-2024-24793

A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafted DICOM file can cause premature freeing of memory that is used later. To trigger this vulnerability, an attacker would need to induce the vulnerable...

CVE-2024-24794

A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafted DICOM file can cause premature freeing of memory that is used later. To trigger this vulnerability, an attacker would need to induce the vulnerable...

Design/Logic Flaw

A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafted DICOM file can cause premature freeing of memory that is used later. To trigger this vulnerability, an attacker would need to induce the vulnerable...

CVE-2024-24793

Imaging Data Commons libdicom 1.0.5 is affected by a Use-After-Free in the File Meta Information parsing (parse_meta_element_create and related paths), tracked as CVE-2024-24793. The flaw allows memory to be freed prematurely and then used, potentially leading to memory corruption and arbitrary c...

Imaging Data Commons libdicom Resource Management Error Vulnerability

Imaging Data Commons libdicom is the Imaging Data Commons C library for reading DICOM files. A resource management error vulnerability exists in Imaging Data Commons libdicom version 1.0.5, which stems from a post-release reuse vulnerability in the parsing of DICOM elements...

Imaging Data Commons libdicom Resource Management Error Vulnerability

Imaging Data Commons libdicom is the Imaging Data Commons C library for reading DICOM files. A resource management error vulnerability exists in Imaging Data Commons libdicom version 1.0.5, which stems from a post-release reuse vulnerability in the parsing of DICOM elements...

Imaging Data Commons libdicom DICOM File Meta Information Parsing Use-After-Free vulnerabilities

Talos Vulnerability Report TALOS-2024-1931 Imaging Data Commons libdicom DICOM File Meta Information Parsing Use-After-Free vulnerabilities February 20, 2024 CVE Number CVE-2024-24793,CVE-2024-24794 SUMMARY A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imagi...

Medium: python-pillow

Issue Overview: Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service crash via a crafted FLI file. CVE-2016-0775 Affected Packages: python-pillow Note: This advisory is applicable to Amazon Linux 2 A...

CVE-2023-50447

A vulnerability was found in Pillow, a popular Python imaging library. The flaw identified in the PIL.ImageMath.eval function enables arbitrary code execution by manipulating the environment parameter. Mitigation Mitigation for this issue is either not available or the currently available options...

UBUNTU-CVE-2023-50447

Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 which was about the expression parameter...

manchester-imaging.com Improper Access Control vulnerability OBB-3804503

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-46235

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version 1.5.10.15, due to a lack of request sanitization in the logs, a malicious request containing XSS would be stored in a log file. When an administrator of the FOG server logged in and viewed the log...

CVE-2023-46237

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version 1.5.10, an endpoint intended to offer limited enumeration abilities to authenticated users was accessible to unauthenticated users. This enabled unauthenticated users to discover files and their...