Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: Grassroot DICOM Clear all filters
TI-2025-33546 CVE-2025-53619 · GHSA-fq58-99h4-8g39

Memory corruption in Grassroot DICOM

Priority MEDIUM 41

An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00341 Published 2025-12-16 No fix listed CWE-119
TI-2025-33545 CVE-2025-53618 · GHSA-r46x-x9h4-p52r

Memory corruption in Grassroot DICOM

Priority MEDIUM 41

An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0032 Published 2025-12-16 No fix listed CWE-119
TI-2025-32677 CVE-2025-52582 · GHSA-xqwf-q6p3-jgrr

Memory corruption in Grassroot DICOM

Priority LOW 35

An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality of Grassroot DICOM 3.024.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00414 Published 2025-12-16 No fix listed CWE-119
TI-2025-30730 CVE-2025-48429 · GHSA-7rw8-4p59-vgjq

Memory corruption in Grassroot DICOM

Priority MEDIUM 42

An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00432 Published 2025-12-16 No fix listed CWE-119
TI-2024-14966 CVE-2024-22391 · GHSA-gm33-c2ph-c6cj

Memory corruption in Grassroot DICOM

Priority HIGH 76

A heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of Mathieu Malaterre Grassroot DICOM 3.0.23.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01394 Published 2024-04-25 No fix listed CWE-119
TI-2024-14950 CVE-2024-22373 · GHSA-562h-465j-vfp9

Memory corruption in Grassroot DICOM

Priority MEDIUM 46

An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01652 Published 2024-04-25 No fix listed CWE-119
TI-2024-16804 CVE-2024-25569 · GHSA-jc42-r5p9-j2vr

Out-of-bounds read in Grassroot DICOM

Priority HIGH 68

An out-of-bounds read vulnerability exists in the RAWCodec::DecodeBytes functionality of Mathieu Malaterre Grassroot DICOM 3.0.23.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01083 Published 2024-04-25 No fix listed CWE-125
TI-2015-06917 CVE-2015-8397 · GHSA-25wj-x94f-xxw3

The JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx…

Priority MEDIUM 42

The JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows remote attackers to obtain sensitive information from process memory or cause a d…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.03609 Published 2016-01-12 No fix listed CWE-125
TI-2015-06916 CVE-2015-8396 · GHSA-xc32-5f4v-7g6x

Integer overflow in the ImageRegionReader::ReadIntoBuffer function in…

Priority MEDIUM 59

Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows attackers to execute arbitrary code via crafted…

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.16031 Published 2016-01-12 No fix listed CWE-189