Vulnerabilidades de Malaterre
CVEs publicadas que afetam produtos de Malaterre: 4 registro(s), com severidade, exploração e correções.
CVE-2025-53619
Crítica · 9.1
CWE-125 16/12/2025
Out-of-bounds Read em Malaterre Grassroots Dicom
An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.The function `null_convert` is called based of the value of the malicious DICOM file specifying the intended interpretation of the image pixel data
CVE-2025-53618
Crítica · 9.1
CWE-125 16/12/2025
Out-of-bounds Read em Malaterre Grassroots Dicom
An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.The function `grayscale_convert` is called based of the value of the malicious DICOM file specifying the intended interpretation of the image pixel data
CVE-2025-52582
Alta · 7.5
CWE-125 16/12/2025
Out-of-bounds Read em Malaterre Grassroots Dicom
An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2025-48429
Crítica · 9.1
CWE-125 16/12/2025
Out-of-bounds Read em Malaterre Grassroots Dicom
An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to leaking heap data. An attacker can provide a malicious file to trigger this vulnerability.