CVE-2024-47796
CVSS 3.1 Score 8.4 of 10 (high)
Details
Published Jan 13, 2025
CWE ID 119
Summary
CVE-2024-47796 is a newly identified vulnerability affecting OFFIS DCMTK 3.6.8. This issue involves an improper array index validation in the 'nowindow' functionality. An attacker can exploit this flaw by crafting a malicious DICOM file to induce an out-of-bounds write. Successful exploitation could result in unintended code execution or denial-of-service conditions. It is crucial for users to update their OFFIS DCMTK installation as soon as a patch becomes available to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.