Use-After-Free Vulnerability in Imaging Data Commons libdicom 1.0.5

CVE-2024-24794

What is CVE-2024-24794?

A use-after-free vulnerability exists within the DICOM Element Parsing functionality of Imaging Data Commons libdicom 1.0.5. This flaw can be exploited when a specially crafted DICOM file is processed, leading to premature memory deallocation. Specifically, during the parsing of Sequence Value Representations through the parse_meta_sequence_end() function, an attacker could manipulate the vulnerable application into freeing memory that is subsequently accessed, resulting in potential unauthorized actions or data corruption. Proper security measures and updates are critical to mitigate the risks associated with this vulnerability.

References