Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (application crash) via an embedded JPEG-LS image with dimensions larger than the selected region in a (1) two-dimensional or (2) three-dimensional DICOM image file, which triggers an out-of-bounds read.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Grassroots DICOM 缓冲区错误漏洞
Vulnerability Description
Grassroots DICOM（又名GDCM）是一个用于处理DICOM医疗图像的C++库。 GDCM 2.6.2之前版本的MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx文件中的‘JPEGLSCodec::DecodeExtent’函数中存在安全漏洞。远程攻击者可借助大于二维或三维DICOM图像中给定区域的嵌入式JPEG-LS图像利用该漏洞获取进程内存中的敏感信息，或造成拒绝服务（应用程序崩溃）。
CVSS Information
N/A
Vulnerability Type
N/A