Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker-controlled heap out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.
CVSS 4.0MEDIUM 5.3·Network·No auth·User interaction·EPSS 0.00481·Published 2026-08-06·Fixed in 2026.1CWE-787
Medixant RadiAnt DICOM Viewer is vulnerable due to failure of the update mechanism to verify the update server's certificate which could allow an attacker to alter network traffic and carry out a machine-in-the-middle at…
