Heap Out-of-Bounds Write in DICOM File Parser

Executive Summary

This vulnerability involves a crafted DICOM file with malicious JPEG-compressed pixel data that triggers a heap out-of-bounds write in the RadiAnt DICOM Viewer software. This flaw may allow an attacker to remotely execute arbitrary code on the affected system.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires monitoring for suspicious DICOM file processing or RadiAnt DICOM Viewer crashes. Check system logs for crashes when opening DICOM files. Use tools like Process Monitor to observe RadiAnt DICOM Viewer behavior when processing files. Scan for files with unusual JPEG-compressed pixel data in DICOM files using file analysis tools.

Useful 0 Not Useful 0

Impact Analysis

Exploitation requires user interaction, such as opening a specially crafted DICOM file. Successful attacks could crash the application or allow arbitrary code execution, potentially leading to malware installation or system compromise. The impact depends on the user's privileges and system configuration.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability may lead to arbitrary code execution on affected systems, which could result in unauthorized access to sensitive data. For organizations handling protected health information (PHI) under HIPAA, this could lead to breaches requiring notification and potential penalties. Under GDPR, unauthorized access to personal data could trigger reporting obligations and fines depending on the severity of the breach.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update RadiAnt DICOM Viewer to version 2026.1 or later. Avoid opening DICOM files from untrusted sources. Isolate systems running RadiAnt DICOM Viewer from critical networks. Enable exploit mitigation mechanisms like DEP, ASLR, and Control Flow Guard. Implement network segmentation and restrict remote access to systems running the vulnerable software.

Useful 0 Not Useful 0