Emmanuel Tacheau

**Name of the Vulnerable Software and Affected Versions** vtk vtk-dicom (affected versions not specified) **Description** A heap-based buffer overflow occurs in the `vtkDICOMItem::NewDataElement()` function. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated memory block than it can hold. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Grassroot DICOM version 3.024 **Description** A flaw exists in the RLECodec::DecodeByStreams functionality that can lead to a heap data leak. A specially crafted DICOM file can trigger this issue. An attacker can provide a malicious file to exploit this. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Grassroot DICOM version 3.024 **Description** An out-of-bounds read issue exists in the JPEGBITSCodec::InternalCode functionality. A crafted DICOM file can cause an information leak. An attacker can trigger this by providing a malicious file. The `null convert` function is called based on the value of the malicious DICOM file, which specifies the intended interpretation of the image pixel data. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Grassroot DICOM version 3.024 **Description** An out-of-bounds read issue exists in the JPEGBITSCodec::InternalCode functionality. A specially crafted DICOM file can cause an information leak. An attacker can trigger this by providing a malicious file. The `grayscale convert` function is called based on the value of the malicious DICOM file, which specifies the intended interpretation of the image pixel data. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Grassroot DICOM version 3.024 **Description** An out-of-bounds read issue exists in the `Overlay::GrabOverlayFromPixelData` function of the software. A specially crafted DICOM file can trigger an information leak. An attacker can provide a malicious file to exploit this issue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** MedDream PACS Premium version 7.3.3.840 **Description** An incorrect default permissions vulnerability exists in the `CServerSettings::SetRegistryValues` functionality. A specially crafted application can decrypt credentials stored in a configuration-related registry key. An attacker can execute a malicious script or application to exploit this vulnerability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** MedDream PACS Premium version 7.3.3.840 **Description** A privilege escalation issue exists in the `login.php` functionality. An attacker can upload a malicious `.php` file to gain elevated access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: OFFIS DCMTK version 3.6.8 Description: An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability. Recommendations: For OFFIS DCMTK version 3.6.8, consider upgrading to a newer version that contains a fix for this vulnerability, such as dcmtk-3.6.9-1.1. As a temporary workaround, consider restricting access to the nowindow functionality to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** OFFIS DCMTK version 3.6.8 **Description** An improper array index validation issue exists in the `determineMinMax` functionality. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this issue, potentially exploiting the improper array index validation in the `determineMinMax` function. **Recommendations** For OFFIS DCMTK version 3.6.8, consider disabling the `determineMinMax` function until a patch is available to prevent potential out-of-bounds writes. Restrict access to handling DICOM files to minimize the risk of exploitation. Avoid using potentially malicious DICOM files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** OFFIS DCMTK version 3.6.8 **Description** An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI PList::createFromImage functionality. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. **Recommendations** For OFFIS DCMTK version 3.6.8, consider avoiding the use of the DVPSSoftcopyVOI PList::createFromImage functionality until a patch is available. As a temporary workaround, restrict the handling of malformed files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Mathieu Malaterre Grassroot DICOM version 3.0.23 **Description** An out-of-bounds read issue exists in the RAWCodec::DecodeBytes functionality. A specially crafted DICOM file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this issue. **Recommendations** For Mathieu Malaterre Grassroot DICOM version 3.0.23, consider avoiding the use of the RAWCodec::DecodeBytes functionality until a patch is available. As a temporary workaround, restrict the handling of DICOM files from untrusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Mathieu Malaterre Grassroot DICOM version 3.0.23 **Description** An out-of-bounds write issue exists in the `JPEG2000Codec::DecodeByStreamsCommon` functionality. A specially crafted DICOM file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this issue. **Recommendations** For Mathieu Malaterre Grassroot DICOM version 3.0.23, consider avoiding the use of the `JPEG2000Codec::DecodeByStreamsCommon` functionality until a patch is available. As a temporary workaround, restrict the handling of DICOM files from untrusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Mathieu Malaterre Grassroot DICOM version 3.0.23 **Description** A heap-based buffer overflow issue exists in the LookupTable::SetLUT functionality. This can be triggered by a specially crafted malformed file, leading to memory corruption. An attacker can exploit this by providing a malicious file. **Recommendations** For Mathieu Malaterre Grassroot DICOM version 3.0.23, avoid using the LookupTable::SetLUT functionality with untrusted files until a patch is available. As a temporary workaround, consider restricting the use of this functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Accusoft ImageGear version 20.1 **Description** The issue is related to an out-of-bounds write vulnerability in the `tiff planar adobe` functionality of the library. This can be exploited by providing a specially crafted malformed file, potentially leading to memory corruption and allowing an attacker to execute arbitrary code or cause a denial of service. **Recommendations** For Accusoft ImageGear version 20.1, consider avoiding the use of the `tiff planar adobe` functionality until a patch is available. As a temporary workaround, restrict the processing of files from untrusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Accusoft ImageGear version 20.1 **Description** A heap-based buffer overflow vulnerability exists in the pictwread functionality. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. **Recommendations** For Accusoft ImageGear version 20.1, consider disabling the pictwread functionality until a patch is available to prevent arbitrary code execution. Restrict access to handling malformed files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Accusoft ImageGear version 20.1 **Description** An out-of-bounds write issue exists in the `dcm pixel data decode` functionality. A specially crafted malformed file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this issue. **Recommendations** For Accusoft ImageGear version 20.1, consider avoiding the use of the `dcm pixel data decode` functionality until a patch is available. As a temporary workaround, restrict the opening of potentially malicious files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Accusoft ImageGear version 20.1 **Description** A heap-based buffer overflow vulnerability exists in the CreateDIBfromPict functionality. This can be triggered by a specially crafted file, potentially leading to arbitrary code execution. An attacker can exploit this by providing a malicious file. **Recommendations** For Accusoft ImageGear version 20.1, consider disabling the CreateDIBfromPict functionality until a patch is available to prevent potential arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Accusoft ImageGear version 20.1 **Description** A use-after-free vulnerability exists in the `tif parse sub IFD` functionality. This allows an attacker to deliver a specially crafted malformed file, potentially leading to arbitrary code execution. **Recommendations** For Accusoft ImageGear version 20.1, consider avoiding the use of the `tif parse sub IFD` functionality until a patch is available. As a temporary workaround, restrict the handling of malformed files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Accusoft ImageGear version 20.1 **Description** An out-of-bounds write issue exists in the `allocate buffer for jpeg decoding` functionality. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this issue. **Recommendations** For Accusoft ImageGear version 20.1, consider avoiding the use of the `allocate buffer for jpeg decoding` functionality until a patch is available. As a temporary workaround, restrict the processing of malformed files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Accusoft ImageGear version 20.1 **Description** A stack-based buffer overflow vulnerability exists in the `tif processing dng channel count` functionality. This issue is related to a buffer overflow operation. Exploitation of this vulnerability may allow a remote attacker to impact the confidentiality, integrity, and availability of protected information. A specially crafted malformed file can lead to memory corruption, and an attacker can provide a malicious file to trigger this vulnerability. **Recommendations** For Accusoft ImageGear version 20.1, consider disabling the `tif processing dng channel count` function until a patch is available to prevent potential exploitation. Restrict access to handling malformed files to minimize the risk of triggering the buffer overflow.