CVE-2015-8396

Critical

Published: 12/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Integer overflow in the ImageRegionReader::ReadIntoBuffer function in Grassroots DICOM before version 2.6.2 allows attackers to execute arbitrary code via crafted header dimensions in a DICOM image file, triggering a buffer overflow.

Risk Assessment

This vulnerability may lead to remote code execution, posing a serious security threat to systems processing DICOM files.

Recommendation

It is recommended to upgrade to GDCM version 2.6.2 or later to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows attackers to execute arbitrary code via crafted header dimensions in a DICOM image file, which triggers a buffer overflow.