Code Execution Vulnerability in Siemens Healthineers Syngo FastView

CVE-2021-45465

Summary

A security vulnerability exists in Syngo FastView, where the application fails to properly validate user-supplied data while parsing BMP files. This deficiency can create a write-what-where condition that attackers may exploit to execute arbitrary code within the context of the affected process. The vulnerability poses significant security risks, especially in environments relying on precise imaging solutions, making it crucial for users to assess their risk and apply any available mitigations.

References