MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior are affected by a heap-based buffer overflow vulnerability, which could allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. A user must open a malicious DCM file in order to exploit the vulnerability.

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-22100
• https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-060-01