CVE-2024-23914

Description

Use of Externally-Controlled Format String vulnerability in Merge DICOM Toolkit C/C++ on Windows. When MC_Open_Association() function is used to open DICOM Association and gets DICOM Application Context Name with illegal characters, it might result in an unhandled exception.

References

https://thehackernews.com/2024/05/researchers-uncover-11-security-flaws.html

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23914

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3