What’s Vulnerable › Vulnerabilities

CVE-2024-23914

• Severity: medium (CVSS 5.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-03 · updated 2026-06-17
• Weakness: CWE-134

Description

Use of Externally-Controlled Format String vulnerability in Merge DICOM Toolkit C/C++ on Windows. When MC_Open_Association() function is used to open DICOM Association and gets DICOM Application Context Name with illegal characters, it might result in an unhandled exception.

Affected products

• Merative Merge Dicom Toolkit C C++: from 5.6.0 through 5.17.0

References

• https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23914
• https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23914

Get alerted when CVE-2024-23914 or the next vulnerability affects your stack