CRITICAL🇬🇧 English

CVE-2015-8396

CVSS 10.0v3.0pub. 2016-01-12upd. 2026-05-06

Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows attackers to execute arbitrary code via crafted header dimensions in a DICOM image file, which triggers a buffer overflow.

oryginał EN
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

  • Malaterre Grassroots Dicom

    APP
    Malaterre
    2.6.1≤ 2.6.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCEMemory
CWE
Referencje

Powiązane podatności

CVE-2025-53619HIGH7.4ten sam produkt

An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM...

CVE-2025-48429HIGH7.4ten sam produkt

An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3...

CVE-2025-52582HIGH7.4ten sam produkt

An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality of Grassroot...

CVE-2025-53618HIGH7.4ten sam produkt

An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM...

CVE-2024-22373HIGH8.1ten sam produkt

An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathi...

CVE-2015-8396 — CRITICAL 10.0 | CVEbaza.pl