Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2023-32131

What is CVE-2023-32131?

An out-of-bounds write vulnerability exists in Sante DICOM Viewer Pro that can lead to remote code execution. The flaw occurs during the parsing of DCM image files, where specially crafted data can cause the application to write beyond the allocated memory buffer. This could enable an attacker to execute arbitrary code within the context of the current process. Exploitation of this vulnerability necessitates user interaction, as the victim must either open a malicious DCM file or visit a compromised webpage designed to deliver the harmful content.

References