Approved changes feed: RSS · Atom

cpe:2.3:a:malaterre:grassroots_dicom:3.0.23:*:*:*:*:*:*:*

part: a version: 3.0.23 update: *

VendorMalaterre (a4cdb232-4ff7-5e50-b7c8-1a8e9b579a59)
ProductGrassroots Dicom (e7308fec-aff1-5abd-b07c-58b083166e84)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gdcm purl2cpe 2026-06-01 10:15:08.349044
pkg:deb/ubuntu/gdcm purl2cpe 2026-06-01 10:15:08.349046
pkg:github/malaterre/gdcm purl2cpe 2026-06-01 10:15:08.349047
pkg:rpm/fedora/gdcm purl2cpe 2026-06-01 10:15:08.349049
pkg:rpm/opensuse/gdcm purl2cpe 2026-06-01 10:15:08.349050
pkg:sourceforge/gdcm purl2cpe 2026-06-01 10:15:08.349052

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-25569 vulnerable 2026-06-08 06:31:23.242455 Details available
MEDIUM (6.5)
An out-of-bounds read vulnerability exists in the RAWCodec::DecodeBytes functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted DICOM file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2024-04-25T14:33:06.539Z
Updated: 2025-11-04T17:14:27.283Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22391 vulnerable 2026-06-08 06:29:34.812875 Details available
HIGH (7.7)
A heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2024-04-25T14:33:07.730Z
Updated: 2025-11-04T17:14:18.583Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22373 vulnerable 2026-06-08 06:29:34.738156 Details available
HIGH (8.1)
An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted DICOM file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2024-04-25T14:33:07.092Z
Updated: 2026-09-10T05:07:52.142Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.