CVE-2023-39431

Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.

• CWE-787
• CWE-787

• https://www.cisa.gov/news-events/ics-medical-advisories/icsma-23-285-01Third Party Advisory, US Government Resource
• https://www.cisa.gov/news-events/ics-medical-advisories/icsma-23-285-01Third Party Advisory, US Government Resource

Published

Oct 19, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-39423The RDPData.dll file exposes the /irmdata/api/common endpoin…9.1
• CVE-2023-39424A vulnerability in RDPngFileUpload.dll, as used in the IRM N…8.8
• CVE-2023-39425Improper access control in some Intel(R) DSA software before…7.8
• CVE-2023-39427 In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt …7.8
• CVE-2023-39429Cross-site scripting vulnerability in FURUNO SYSTEMS wireles…5.4
• CVE-2023-3943Stack-based Buffer Overflow vulnerability in ZkTeco-based OE…10
• CVE-2023-39432Improper access control element in some Intel(R) Ethernet to…7.8
• CVE-2023-39433Improper access control for some Intel(R) CST software befor…4.4
• CVE-2023-39434A use-after-free issue was addressed with improved memory ma…8.8
• CVE-2023-39435Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220…9.8
• CVE-2023-39436SAP Supplier Relationship Management -versions 600, 602, 603…5.8
• CVE-2023-39437SAP business One allows - version 10.0, allows an attacker t…5.4