Bug 2493241 (CVE-2026-22879)
| Summary: | CVE-2026-22879 vtk: vtk-dicom: vtk-dicom: Arbitrary code execution via heap-based buffer overflow in vtkDICOMItem::NewDataElement | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in vtk-dicom. A heap-based buffer overflow vulnerability exists in the `vtkDICOMItem::NewDataElement` function. A remote attacker could exploit this vulnerability without requiring user interaction or elevated privileges. Successful exploitation could lead to arbitrary code execution, allowing the attacker to take full control of the affected system, or cause a denial of service (DoS).
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2493358, 2493359, 2493360, 2493361 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-06-25 22:02:44 UTC
|