CVE-2019-5090

CVE-2019-5090 affects LEADTOOLS libltdic.so 20.0.2019.3.15 in the DICOM packet-parsing path. A crafted DICOM network packet can trigger an out-of-bounds read in LDicomFile::Write, leading to information disclosure. Talos advisories (e.g., TALOS-2019-0882) describe the vulnerability details and co...

PT-2019-17473

Name of the Vulnerable Software and Affected Versions LEADTOOLS version 20.0.2019.3.15 Description A heap out of bounds write issue exists in the UI tag parsing functionality of the DICOM image format. This can be triggered by a specially crafted DICOM image, potentially allowing code execution. ...

PT-2019-17471

Name of the Vulnerable Software and Affected Versions LEADTOOLS libltdic.so version 20.0.2019.3.15 Description An exploitable information disclosure issue exists in the DICOM packet-parsing functionality. A specially crafted packet can cause an out-of-bounds read, resulting in information...

PT-2019-17466

Name of the Vulnerable Software and Affected Versions LEADTOOLS libltdic.so version 20.0.2019.3.15 Description A code execution issue exists in the DICOM packet-parsing functionality. It can be triggered by a specially crafted packet, causing an integer overflow that results in heap corruption...

PT-2019-17503

Name of the Vulnerable Software and Affected Versions LEADTOOLS version 20.0.2019.3.15 Description A heap overflow vulnerability exists in the JPEG2000 parsing functionality. A specially crafted J2K image file can cause an out of bounds write of a null byte in a heap buffer, potentially resulting...

PT-2019-17474

Name of the Vulnerable Software and Affected Versions LEADTOOLS libltdic.so version 20.0.2019.3.15 Description An exploitable code execution issue exists in the DICOM network response functionality. A specially crafted packet can cause an integer overflow, resulting in heap corruption. An attacke...

PT-2019-17472

Name of the Vulnerable Software and Affected Versions LEADTOOLS libltdic.so version 20.0.2019.3.15 Description A denial-of-service issue exists in the Dicom-packet parsing functionality. A specially crafted packet can cause an infinite loop, resulting in a denial of service. An attacker can send ...

CVE-2019-5092: Out-of-bounds Write

An exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image format of LEADTOOLS 20.0.2019.3.15. A specially crafted DICOM image can cause an offset beyond the bounds of a heap allocation to be written, potentially resulting in code execution...

CVE-2019-5154: Heap-based Buffer Overflow

An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20.0.2019.3.15. A specially crafted J2K image file can cause an out of bounds write of a null byte in a heap buffer, potentially resulting in code execution. An attack can specially craft a J2K...

CVE-2019-5091: Loop with Unreachable Exit Condition

An exploitable denial-of-service vulnerability exists in the Dicom-packet parsing functionality of LEADTOOLS libltdic.so version 20.0.2019.3.15. A specially crafted packet can cause an infinite loop, resulting in a denial of service. An attacker can send a packet to trigger this vulnerability...

CVE-2019-5085: Integer Overflow or Wraparound

An exploitable code execution vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version 20.0.2019.3.15. A specially crafted packet can cause an integer overflow, resulting in heap corruption. An attacker can send a packet to trigger this vulnerability...

CVE-2019-5090: Out-of-bounds Read

An exploitable information disclosure vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version 20.0.2019.3.15. A specially crafted packet can cause an out-of-bounds read, resulting in information disclosure. An attacker can send a packet to trigger this...

CVE-2019-5093: Integer Overflow or Wraparound

An exploitable code execution vulnerability exists in the DICOM network response functionality of LEADTOOLS libltdic.so version 20.0.2019.3.15. A specially crafted packet can cause an integer overflow, resulting in heap corruption. An attacker can send a packet to trigger this vulnerability...

Vulnerability Spotlight: Multiple vulnerabilities in LEADTOOLS software

Marcin Towalski and Cory Duplantis of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered multiple vulnerabilities in the LEADTOOLS line of imaging toolkits. LEADTOOLS is a collection of toolkits designed to perform a variety of functions aimed at...

LEADTOOLS DICOM UI Parsing Code Execution Vulnerability

Summary An exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image format of LEADTOOLS 20. A specially crafted DICOM image can cause an offset beyond the bounds of a heap allocation to be written, potentially resulting in code execution. An...

LEADTOOLS libltdic.so DICOM receive code execution vulnerability

Summary An exploitable code execution vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version 20.0.2019.3.15. A specially crafted packet can cause an integer overflow, resulting in heap corruption. An attacker can send a packet to trigger this vulnerabilit...

LEADTOOLS libltdic.so DICOM LDicomNet::receive information disclosure vulnerability

Summary An exploitable information disclosure vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version 20.0.2019.3.15. A specially crafted packet can cause an out-of-bounds read, resulting in information disclosure. An attacker can send a packet to trigger...

LEADTOOLS libltdic.so DICOM LDicomNet::SendData Code Execution Vulnerability

Summary An exploitable code execution vulnerability exists in the DICOM network response functionality of LEADTOOLS libltdic.so version 20.0.2019.3.15. A specially crafted packet can cause an integer overflow, resulting in heap corruption. An attacker can send a packet to trigger this...

LEADTOOLS libltdic.so LDicomAssociate::SetBinary denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the Dicom-packet parsing functionality of LEADTOOLS libltdic.so version 20. A specially crafted packet can cause an infinite loop, resulting in a denial of service. An attacker can send a packet to trigger this vulnerability. Tested...

LEADTOOLS JPEG2000 Isot parsing Memory Corruption Vulnerability

Summary An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20.0.2019.3.15. A specially crafted J2K image file can cause an out of bounds write of a null byte in a heap buffer, potentially resulting in code execution. An attack can specially craft ...