PT-2024-20563 · Libdicom · Libdicom

Dimitrios Tatsis · Published 2024-02-20 · Updated 2025-02-12 · CVE-2024-24794

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libdicom version 1.0.5

Description A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom. This issue can be triggered by a specially crafted DICOM file, causing premature freeing of memory that is used later. The vulnerability occurs in the parse meta sequence end() function while parsing the Sequence Value Representations. An attacker would need to induce the vulnerable application to process a malicious DICOM image to exploit this issue.

Recommendations For libdicom version 1.0.5, consider disabling the parse meta sequence end() function until a patch is available to prevent exploitation. Restrict access to processing DICOM images from untrusted sources to minimize the risk of triggering this vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2024-24794

Affected Products

Libdicom

References · 8

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2024-1931 · Exploit
• https://osv.dev/vulnerability/CVE-2024-24794 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-24794 · Security Note
• https://twitter.com/CVEnew/status/1759893950624907584 · Twitter Post
• https://t.me/cvenotify/71961 · Telegram Post
• https://twitter.com/cracbot/status/1760182625208303744 · Twitter Post
• https://t.me/cvenotify/111103 · Telegram Post
• https://t.me/cvenotify/72003 · Telegram Post