CVE-2024-24794

Summary

CVE-2024-24794 is a use-after-free vulnerability affecting Imaging Data Commons libdicom 1.0.5. This issue arises when a specially crafted DICOM file induces the vulnerable application to free memory prematurely, which later gets used. The memory manipulation occurs during parsing of Sequence Value Representations in the `parse_meta_sequence_end()` function. Attackers could exploit this vulnerability by providing a malicious DICOM image, potentially leading to arbitrary code execution or denial-of-service conditions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.