What’s Vulnerable › Vulnerabilities

CVE-2024-23912

• Severity: medium (CVSS 4.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-03 · updated 2026-06-17
• Weakness: CWE-125

Description

Out-of-bounds Read vulnerability in Merge DICOM Toolkit C/C++ on Windows. When MC_Open_File() function is used to read a malformed DICOM data, it might result in over-reading memory buffer and could cause memory access violation.

Affected products

• Merative Merge Dicom Toolkit C C++: from v5.0.0 through 5.17.0

References

• https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23912
• https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23912

Get alerted when CVE-2024-23912 or the next vulnerability affects your stack