xmedcon Integer Underflow Vulnerability in DICOM File Handler

An integer underflow vulnerability has been identified in xmedcon version 0.25.0, specifically within the DICOM File Handler component's malloc function. This vulnerability allows for remote exploitation, where an attacker can manipulate input to cause the integer underflow, potentially leading to memory corruption. The issue has been acknowledged to impact the application's availability.

Impact

Exploitation of this vulnerability causes a heap buffer overflow, allowing for memory corruption. This type of vulnerability can often be exploited to execute arbitrary code or cause a denial-of-service condition, where the application crashes or becomes unresponsive.

Remediation

Users are advised to upgrade to xmedcon version 0.25.1, which addresses this vulnerability. The updated version is available for download on the xmedcon official website.