PatchTheCVElibdicom vulnerabilities and fixes
Recent CVEs affecting libdicom, with upgrade or downgrade steps. 2 tracked.
libdicom has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-02-20. Highest priority: CVE-2024-24794 (score 54/100).
- CVE-2024-24794 HIGH 8.1 DOWNGRADE A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libd
- CVE-2024-24793 HIGH 8.1 DOWNGRADE A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libd
FAQ
How do I fix libdicom vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libdicom being exploited right now?
None of the tracked libdicom CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libdicom CVE should I patch first?
CVE-2024-24794 currently ranks highest (54/100): A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libd.