Approved changes feed: RSS · Atom

cpe:2.3:a:grassroots_dicom_project:grassroots_dicom:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGrassroots Dicom Project (b1011536-0cee-506c-8f02-625e7f359212)
ProductGrassroots Dicom (66ed3f6e-84a8-5a18-999f-7c7c3bf1b20f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/pmelendez/gdcm purl2cpe 2026-06-01 10:12:03.150679
pkg:deb/debian/gdcm purl2cpe 2026-06-01 10:12:03.150681
pkg:deb/ubuntu/gdcm purl2cpe 2026-06-01 10:12:03.150682
pkg:github/malaterre/gdcm purl2cpe 2026-06-01 10:12:03.150684
pkg:rpm/fedora/gdcm purl2cpe 2026-06-01 10:12:03.150685
pkg:rpm/opensuse/gdcm purl2cpe 2026-06-01 10:12:03.150687
pkg:sourceforge/gdcm purl2cpe 2026-06-01 10:12:03.150688

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-25569 vulnerable 2026-06-08 06:31:23.239576 Details available
MEDIUM (6.5)
An out-of-bounds read vulnerability exists in the RAWCodec::DecodeBytes functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted DICOM file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2024-04-25T14:33:06.539Z
Updated: 2025-11-04T17:14:27.283Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22373 vulnerable 2026-06-08 06:29:34.736148 Details available
HIGH (8.1)
An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted DICOM file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2024-04-25T14:33:07.092Z
Updated: 2026-09-10T05:07:52.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8397 vulnerable 2026-06-08 05:07:03.912744 Details available
The JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (application crash) via an embedded JPEG-LS image with dimensions larger than the selected region in a (1) two-dimensional or (2) three-dimensional DICOM image file, which triggers an out-of-bounds read.
Published: 2016-01-12T20:00:00.000Z
Updated: 2024-08-06T08:13:32.679Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8396 vulnerable 2026-06-08 05:07:03.909386 Details available
Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows attackers to execute arbitrary code via crafted header dimensions in a DICOM image file, which triggers a buffer overflow.
Published: 2016-01-12T20:00:00.000Z
Updated: 2024-08-06T08:13:32.903Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.