dcmjs DICOM numeric field validation bypass causes wrong calculations or stalled processing
Medical imaging tools can take in bad numbers, causing wrong results or stalls!
Summary
The dcmjs JavaScript library reads DICOM DS and IS numeric fields without validating them, so invalid values can get into applications. Versions before 0.52.0 are affected, and apps that trust these values can calculate incorrectly or stop processing.
What to do
Update dcmjs to 0.52.0 or later.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen