8.1
High
CVE-2019-5093 An exploitable code execution vulnerability exists in the DICOM network response functionality of LEADTOOLS…
Description
An exploitable code execution vulnerability exists in the DICOM network response functionality of LEADTOOLS libltdic.so version 20.0.2019.3.15. A specially crafted packet can cause an integer overflow, resulting in heap corruption. An attacker can send a packet to trigger this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| LEADTOOLS libltdic.so | 20.0.2019.3.15 | No fix stated |
Other CVEs of LEADTOOLS libltdic.so
The 4 CVEs of LEADTOOLS libltdic.so →
CVE-2019-5091
An exploitable denial-of-service vulnerability exists in the Dicom-packet parsing functionality of LEADTOOLS libltdic.so…
7.5
High
CVE-2019-5085
An exploitable code execution vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so,…
9.8
Critical
CVE-2019-5090
An exploitable information disclosure vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS…
9.1
Critical