CVE-2024-24793: Use After Free
A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafted DICOM file can cause premature freeing of memory that is used later. To trigger this vulnerability, an attacker would need to induce the vulnerable application to process a malicious DICOM image.The Use-After-Free happens in the parsemetaelementcreate() parsing the elements in the File Meta Information header.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24793?
CVE-2024-24793 is classified as a high severity use-after-free vulnerability affecting Imaging Data Commons libdicom 1.0.5.
How do I fix CVE-2024-24793?
To mitigate CVE-2024-24793, update the Imaging Data Commons libdicom library to the latest version that has addressed this vulnerability.
What causes CVE-2024-24793?
CVE-2024-24793 is caused by improper handling of DICOM files, leading to premature memory deallocation that can be exploited.
Which software is affected by CVE-2024-24793?
CVE-2024-24793 affects the Imaging Data Commons libdicom version 1.0.5.
Can CVE-2024-24793 lead to remote code execution?
While CVE-2024-24793 is primarily a use-after-free vulnerability, exploitation may lead to undefined behavior, potentially allowing for remote code execution under certain conditions.