AIKIDO-2025-10865

TL;DR

An out-of-bounds read vulnerability exists in the underlying Grassroots DICOM library (GDCM), specifically in the SequenceOfFragments::ReadValue method. The flaw is triggered when the library parses a malformed DICOM file containing encapsulated PixelData fragments (compressed image data stored across multiple fragments). Improper bounds checking allows the parser to read beyond the intended memory region, which may lead to application crashes, information disclosure, or other undefined behavior when handling attacker-controlled DICOM files.