CVE-2023-32133

CVE-2023-32133 covers a vulnerability in Sante DICOM Viewer Pro where the J2K image parsing can cause an out-of-bounds write, enabling remote code execution. The flaw occurs when parsing J2K data: crafted images can write past the end of an allocated buffer, allowing code execution in the process...

CVE-2023-32135

The CVE-2023-32135 issue affects Sante DICOM Viewer Pro, tied to parsing of DCM files. Root cause: missing validation of object existence during operations, leading to a use-after-free that can disclose sensitive information and, in conjunction with other flaws, potentially enable arbitrary code ...

CVE-2023-32132

CVE-2023-32132 concerns Sante DICOM Viewer Pro. The issue is in the parsing of DCM images, where crafted data can trigger a write past the end of an allocated buffer, enabling remote code execution. The attack requires user interaction (visiting a malicious page or opening a malicious file). The ...

CVE-2023-32131

Sante DICOM Viewer Pro is affected by a vulnerability in DCM image parsing that can trigger a write past the end of an allocated buffer, enabling remote code execution. The flaw requires user interaction (visit a malicious page or open a malicious file). The root cause is out-of-bounds write duri...

CVE-2023-32134

The CVE affects Sante DICOM Viewer Pro, where parsing of DCM images is vulnerable to a Use-After-Free flaw that allows remote code execution. The underlying issue is a lack of validation for the existence of an object before performing operations on it, enabling code to be executed in the process...