What’s Vulnerable › Vulnerabilities

CVE-2024-24794

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-02-20 · updated 2026-06-17
• Weakness: CWE-416

Description

A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafted DICOM file can cause premature freeing of memory that is used later. To trigger this vulnerability, an attacker would need to induce the vulnerable application to process a malicious DICOM image.The Use-After-Free happens in the `parse_meta_sequence_end()` parsing the Sequence Value Represenations.

Affected products

• Imaging Data Commons libdicom: 1.0.5

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-1931
• https://talosintelligence.com/vulnerability_reports/TALOS-2024-1931
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1931

Get alerted when CVE-2024-24794 or the next vulnerability affects your stack