CVE-2024-22373: An out-of-bounds write vulnerability exists in the JPEG2000Codec::Deco ...

Severity: Critical

CVSS Score: 9.8

An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted DICOM file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.