Read the docs

Grassroot DICOM

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Grassroot DICOM records in CISA KEV

No Grassroot DICOM vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

9 records

TI-2024-14966 CVE-2024-22391 · GHSA-gm33-c2ph-c6cj

Memory corruption in Grassroot DICOM

Priority HIGH 76

A heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of Mathieu Malaterre Grassroot DICOM 3.0.23.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01394 Published 2024-04-25 No fix listed CWE-119
TI-2024-16804 CVE-2024-25569 · GHSA-jc42-r5p9-j2vr

Out-of-bounds read in Grassroot DICOM

Priority HIGH 68

An out-of-bounds read vulnerability exists in the RAWCodec::DecodeBytes functionality of Mathieu Malaterre Grassroot DICOM 3.0.23.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01083 Published 2024-04-25 No fix listed CWE-125
Priority MEDIUM 59

Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows attackers to execute arbitrary code via crafted…

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.16031 Published 2016-01-12 No fix listed CWE-189
TI-2024-14950 CVE-2024-22373 · GHSA-562h-465j-vfp9

Memory corruption in Grassroot DICOM

Priority MEDIUM 46

An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01652 Published 2024-04-25 No fix listed CWE-119
TI-2025-30730 CVE-2025-48429 · GHSA-7rw8-4p59-vgjq

Memory corruption in Grassroot DICOM

Priority MEDIUM 42

An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00432 Published 2025-12-16 No fix listed CWE-119
Priority MEDIUM 42

The JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows remote attackers to obtain sensitive information from process memory or cause a d…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.03609 Published 2016-01-12 No fix listed CWE-125
TI-2025-33546 CVE-2025-53619 · GHSA-fq58-99h4-8g39

Memory corruption in Grassroot DICOM

Priority MEDIUM 41

An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00341 Published 2025-12-16 No fix listed CWE-119
TI-2025-33545 CVE-2025-53618 · GHSA-r46x-x9h4-p52r

Memory corruption in Grassroot DICOM

Priority MEDIUM 41

An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0032 Published 2025-12-16 No fix listed CWE-119
TI-2025-32677 CVE-2025-52582 · GHSA-xqwf-q6p3-jgrr

Memory corruption in Grassroot DICOM

Priority LOW 35

An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality of Grassroot DICOM 3.024.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00414 Published 2025-12-16 No fix listed CWE-119
Open these records in search →