8.8
High
CVE-2019-5092 An exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image…
Description
An exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image format of LEADTOOLS 20.0.2019.3.15. A specially crafted DICOM image can cause an offset beyond the bounds of a heap allocation to be written, potentially resulting in code execution. An attacker can specially craft a DICOM image to trigger this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| LEADTOOLS | 20.0.2019.3.15 | No fix stated |
References
- talosintelligence.com talosintelligence.com
Timeline
- Published
- Last modified
Other CVEs of LEADTOOLS
The 7 CVEs of LEADTOOLS →
CVE-2020-6089
An exploitable code execution vulnerability exists in the ANI file format parser of Leadtools 20
8.8
High
CVE-2019-5154
An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20.0.2019.3.15
8.8
High
CVE-2019-5100
An exploitable integer overflow vulnerability exists in the BMP header parsing functionality of LEADTOOLS 20
8.8
High
CVE-2019-5125
An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20
8.8
High