CVE-2024-24794: Use After Free
A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafted DICOM file can cause premature freeing of memory that is used later. To trigger this vulnerability, an attacker would need to induce the vulnerable application to process a malicious DICOM image.The Use-After-Free happens in the parsemetasequenceend() parsing the Sequence Value Represenations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24794?
CVE-2024-24794 is classified as a high severity vulnerability due to its potential impact on memory management.
How do I fix CVE-2024-24794?
To address CVE-2024-24794, update the Imaging Data Commons libdicom to the latest version that contains the security patch.
What systems are vulnerable to CVE-2024-24794?
CVE-2024-24794 affects Imaging Data Commons libdicom version 1.0.5 and possibly earlier versions.
What kind of attacks can exploit CVE-2024-24794?
An attacker can exploit CVE-2024-24794 by delivering a specially crafted DICOM file that triggers the use-after-free condition.
What happens if CVE-2024-24794 is successfully exploited?
If successfully exploited, CVE-2024-24794 can lead to application crashes or the execution of arbitrary code.