{"id":"CVE-2024-1453","aliases":["EUVD-2024-17205","GHSA-qpmg-qwmx-2jxm"],"status":"published","title":"Santesoft Sante DICOM Viewer Pro Out-of-Bounds Read","description":"In Sante DICOM Viewer Pro versions 14.0.3 and prior, a user must open a malicious DICOM file, which could allow a local attacker to disclose information or execute arbitrary code.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00251,"percentile":0.16717,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2024-03-01T18:56:40Z","modified":"2026-06-17T07:04:16Z","products":[{"vendor":"santesoft","product":"dicom_viewer_pro"},{"vendor":"santesoft","product":"sante dicom viewer pro"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-058-01","tags":["x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1453"},{"url":"https://github.com/advisories/GHSA-qpmg-qwmx-2jxm"}],"sources":{"cve":[{"id":"CVE-2024-1453","title":"Santesoft Sante DICOM Viewer Pro Out-of-Bounds Read","description":"\nIn Sante DICOM Viewer Pro versions 14.0.3 and prior, a user must open a malicious DICOM file, which could allow a local attacker to disclose information or execute arbitrary code.\n\n","status":"published","published":"2024-03-01T18:56:40.511Z","modified":"2024-08-15T16:04:58.703Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:34:18.259965Z"}],"euvd":[{"id":"EUVD-2024-17205","description":"\nIn Sante DICOM Viewer Pro versions 14.0.3 and prior, a user must open a malicious DICOM file, which could allow a local attacker to disclose information or execute arbitrary code.\n\n","status":"published","published":"2024-03-01T18:56:40Z","modified":"2024-08-15T16:04:58Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:56:17.186492Z"}],"ghsa":[{"id":"GHSA-qpmg-qwmx-2jxm","title":"\nIn Sante DICOM Viewer Pro versions 14.0.3 and prior, a user must open a malicious DICOM file,...","description":"\nIn Sante DICOM Viewer Pro versions 14.0.3 and prior, a user must open a malicious DICOM file, which could allow a local attacker to disclose information or execute arbitrary code.\n\n","status":"published","published":"2024-03-01T21:31:16Z","modified":"2026-03-21T05:27:21Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:06:44.698439Z"}],"nvd":[{"id":"CVE-2024-1453","description":"\nIn Sante DICOM Viewer Pro versions 14.0.3 and prior, a user must open a malicious DICOM file, which could allow a local attacker to disclose information or execute arbitrary code.\n\n","status":"published","published":"2024-03-01T19:15:07.037Z","modified":"2026-06-17T07:04:16.603Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:09:38.473056Z"}]}}