| शीर्षक | DCMTK 3.7.0 and below Heap-based Buffer Overflow |
|---|
| विवरण | A heap buffer overflow exists in XMLNode::parseFile() in ofstd/libsrc/ofxml.cc. When the function is called with a FIFO (named pipe) as input — which is a supported and documented use case via cda2dcm — the ftell() call returns -1 to signal an error. The code does not check for this error condition (it only checks for l == 0), causing malloc(3) to be called followed by fread() with a size_t-casted -1 value, resulting in an attempt to read up to SIZE_MAX bytes into a 3-byte heap buffer.
CWE: CWE-122 (Heap-based Buffer Overflow)
CVSS (estimated): 8.1 HIGH — AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|---|
| स्रोत | ⚠️ https://medium.com/@faboherrera.fabo/dcmtk-vulnerability-report-201afc687790 |
|---|
| उपयोगकर्ता | FaboHerrrera (UID 98477) |
|---|
| सबमिशन | 23/05/2026 11:44 PM (4 महीनों पहले) |
|---|
| संयम | 21/06/2026 06:12 AM (28 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 372599 [OFFIS DCMTK तक 3.7.0 ofstd/libsrc/ofxml.cc XMLNode::parseFile बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|