Skip to content
Threat Feed
Subscribe

Tag

Medical Imaging

3 briefs RSS
high advisory

Remote Code Execution in MONAI Bundle Configuration Engine

MONAI versions through 1.6.0 are vulnerable to remote code execution due to insecure deserialization and evaluation of arbitrary Python callables within bundle configuration files.

MONAI +3 remote-code-execution python supply-chain vulnerability deserialization rce code-execution ml-ops +1
2t 1c
high advisory

Heap Over-read Vulnerability in DCMTK ConcatenationLoader

DCMTK version 3.7.0 and earlier contains a heap over-read vulnerability in the ConcatenationLoader component that can lead to information disclosure or application crashes when processing malformed DICOM files.

DCMTK vulnerability dicom medical-imaging
1t 1c
high advisory

DICOM Heap Overflow in Orthanc Server

A heap overflow vulnerability exists within the DICOM file format, potentially allowing an attacker to target an Orthanc server during image uploads, leading to an out-of-bounds write.

Orthanc +2 dicom heap overflow medical imaging
2r