CVE-2026-48705

MONAI Medical Open Network for AI is an AI toolkit for health care imaging. Prior to 1.6.1, PydicomReader.getaffine trusts non-finite values in the DICOM PixelSpacing, ImagePositionPatient, and ImageOrientationPatient fields and composes them into an affine matrix without validation. An...

CVE-2026-48705

The MONAI AI toolkit (versions

CVE-2026-48705 MONAI: MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)

MONAI Medical Open Network for AI is an AI toolkit for health care imaging. Prior to 1.6.1, PydicomReader.getaffine trusts non-finite values in the DICOM PixelSpacing, ImagePositionPatient, and ImageOrientationPatient fields and composes them into an affine matrix without validation. An...

CVE-2026-48705 MONAI: MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)

MONAI Medical Open Network for AI is an AI toolkit for health care imaging. Prior to 1.6.1, PydicomReader.getaffine trusts non-finite values in the DICOM PixelSpacing, ImagePositionPatient, and ImageOrientationPatient fields and composes them into an affine matrix without validation. An...