CVE-2024-22391

A heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

• CWE-119
• CWE-787

• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZJ4IG7EXMSMPHTK5ZFASCW6MHSOVZOE/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N5HXUKUJ7SG3TK456SGUWVZ4Z5D7JKOL/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJA7QWWZWMY4AQFR35EA7S3CFVUTOQYG/Mailing List
• https://talosintelligence.com/vulnerability_reports/TALOS-2024-1924Exploit, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZJ4IG7EXMSMPHTK5ZFASCW6MHSOVZOE/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N5HXUKUJ7SG3TK456SGUWVZ4Z5D7JKOL/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJA7QWWZWMY4AQFR35EA7S3CFVUTOQYG/Mailing List
• https://talosintelligence.com/vulnerability_reports/TALOS-2024-1924Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1924Third Party Advisory

Published

Apr 25, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-22386A race condition was found in the Linux kernel's drm/exynos …4.7
• CVE-2024-22387External Control of Critical State Data (CWE-642) in the Con…6.8
• CVE-2024-22388Certain configuration available in the communication channel…7.8
• CVE-2024-22389When BIG-IP is deployed in high availability (HA) and an iCo…7.2
• CVE-2024-2239The Premium Addons PRO plugin for WordPress is vulnerable to…5.4
• CVE-2024-22390Improper input validation in firmware for some Intel(R) FPGA…4.4
• CVE-2024-22393Unrestricted Upload of File with Dangerous Type vulnerabilit…9.1
• CVE-2024-22394An improper authentication vulnerability has been identified…9.8
• CVE-2024-22395Improper access control vulnerability has been identified in…6.3
• CVE-2024-22396An Integer-based buffer overflow vulnerability in the SonicO…5.3
• CVE-2024-22397Improper Neutralization of Input During Web Page Generation …8.3
• CVE-2024-22398An improper Limitation of a Pathname to a Restricted Directo…4.9