Detections
Analytics
CVE-2024-28130
high
Description
An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
References
https://talosintelligence.com/vulnerability_reports/TALOS-2024-1957
https://lists.debian.org/debian-lts-announce/2024/06/msg00022.html