जमा करें #673137: DCMTK GitHub Repository DCMTK 3.6.5 Stack-based Buffer Overflowजानकारी

शीर्षकDCMTK GitHub Repository DCMTK 3.6.5 Stack-based Buffer Overflow
विवरण A stack buffer overflow exists in DCMTK (dcmqrscp) ≤ 3.6.5+DEV when parsing the `StorageQuota` field in the AETable. Function `quota(const char*)` reads the last two characters of a quota string without verifying length (`strlen(value) >= 2`), leading to an out-of-bounds read from a stack buffer populated in `parseQuota()`.
स्रोत⚠️ https://shimo.im/docs/rp3OMVMDPKtjn0km/
उपयोगकर्ता
 zh_vul (UID 91488)
सबमिशन11/10/2025 05:26 AM (12 महीनों पहले)
संयम19/10/2025 12:27 PM (8 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि329028 [DCMTK तक 3.6.5 dcmqrscp parseQuota StorageQuota बफ़र ओवरफ़्लो]
अंक19

Interested in the pricing of exploits?

See the underground prices here!