233 matches found
CVE-2026-17264 Medixant RadiAnt DICOM Out-of-bounds write
Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker-controlled heap out-of-bounds write, which may allow an attacker to remotely execute arbitrary code...
CVE-2026-17264
CVE-2026-17264 describes a heap-based out-of-bounds write in the RadiAnt DICOM viewer (Medixant) triggered by opening a crafted DICOM file containing malicious JPEG-compressed pixel data, potentially enabling remote code execution. Public documents confirm the impact as attacker-controlled memory...
Medixant RadiAnt DICOM
ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to cause the application to crash if a maliciously crafted DICOM file is opened. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...
Malicious code in radiant-express-sync-tachyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc11ed6a8c3867ed71199224db53e25c2338a7f38da642038050bbef32d06101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177278
Malicious code in pegasus-radiant-sedna-juno npm...
Malicious code in google-radiant-weywot-rocket (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c66e0686c4618a725de20e95e6ce1715c68327b6ccc280c359a1139312e4a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188267 Malicious code in nextjs-radiant-proteomics-neptune (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ae50e833ca4d9b5cff91a462ab39da7e55d10e50e937ceb63ecf708f7906868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189052 Malicious code in quito-rocket-radiant-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1027d85e5f5fe77252e470808dec33a66a0131fb5706d9c2bdc7aef3e9a7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180377
Malicious code in apollo-xo-bulma-radiant npm...
EUVD-2025-177921
Malicious code in mechatronics-deneb-bunyan-radiant npm...
EUVD-2025-176820
Malicious code in radiant-express-sync-tachyon npm...
EUVD-2025-177832
Malicious code in mini-css-extract-plugin-radiant-axios-sirius npm...
EUVD-2025-176822
Malicious code in radiant-cross-env-neutrino-local npm...
EUVD-2025-176674
Malicious code in resolvers-query-comet-radiant npm...
EUVD-2025-179903
Malicious code in callback-saturnology-taphonomy-radiant npm...
EUVD-2025-177615
Malicious code in nextjs-radiant-proteomics-neptune npm...
EUVD-2025-176819
Malicious code in radiant-express-terser-bellatrix npm...
EUVD-2025-175523
Malicious code in xanthus-child-process-radiant-biotechnology npm...