Description (CNA)
A vulnerability was identified in DCMTK up to 3.6.9. This affects an unknown function in the library dcmimage/include/dcmtk/dcmimage/diybrpxt.h of the component dcm2img. Such manipulation leads to memory corruption. Local access is required to approach this attack. The name of the patch is 7ad81d69b. It is best practice to apply a patch to resolve this issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / DCMTK | affected 3.6.0; affected 3.6.1; affected 3.6.2; affected 3.6.3; affected 3.6.4; affected 3.6.5; affected 3.6.6; affected 3.6.7; affected 3.6.8; affected 3.6.9 |
CWE
CWE-119
References
- https://vuldb.com/?id.322023
- https://vuldb.com/?ctiid.322023
- https://vuldb.com/?submit.639772
- https://github.com/DCMTK/dcmtk/commit/7ad81d69b
ADP enrichment
No English description supplied.