TencentOS Server 4: libdicom (TSSA-2025:0002)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0002 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

CVE-2024-24794

Summary (CVE-2024-24794) Imaging Data Commons libdicom 1.0.5 contains a use-after-free in DICOM Element Parsing. Talos reports a heap-use-after-free in parse_meta_sequence_end and parse_meta_element_create when processing DICOM files with duplicate tags in File Meta Information headers or Sequenc...