VDB

GCVE-110-MAGEIA-2025-17

GCVE-110-MAGEIA-2025-17
Advisory Published
Vulnetix · Advisory published January 20, 2025
An improper array index validation vulnerability exists in the nowindow functionality of OFFIS. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability, CVE-2024-47796. An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability, CVE-2024-52333.

Affected Products

VendorProductVersionsPlatforms
Mageiadcmtk0 (affected), 3.6.7-4.3.mga9 (unaffected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›