CVE-2024-28130

CVE-2024-28130

An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVE-2024-28130

An incorrect type conversion vulnerability exists in the DVPSSoftcopyV ...

openSUSE-SU-2024:0113-1

Security update for dcmtk

GHSA-29f8-5v89-7j3x

An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

BDU:2025-01309

Уязвимость функции DVPSSoftcopyVOI_PList::createFromImage() библиотеки для работы с форматом DICOM DCMTK, позволяющая нарушителю выполнить произвольный код