CVE-2026-2034

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-2034", "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "state": "PUBLISHED", "assignerShortName": "zdi", "dateReserved": "2026-02-06T01:10:06.683Z", "datePublished": "2026-02-20T22:12:39.490Z", "dateUpdated": "2026-02-24T14:56:03.492Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi", "dateUpdated": "2026-02-20T22:12:39.490Z"}, "title": "Sante DICOM Viewer Pro DCM File Parsing Buffer Overflow Remote Code Execution Vulnerability", "descriptions": [{"lang": "en", "value": "Sante DICOM Viewer Pro DCM File Parsing Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28129."}], "affected": [{"vendor": "Sante", "product": "DICOM Viewer Pro", "versions": [{"version": "14.2.6.0", "status": "affected"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-120", "description": "CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", "type": "CWE"}]}], "references": [{"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-104/", "name": "ZDI-26-104", "tags": ["x_research-advisory"]}], "dateAssigned": "2026-02-06T01:10:06.709Z", "datePublic": "2026-02-13T14:14:03.637Z", "source": {"lang": "en", "value": "Anonymous"}, "metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-24T14:55:25.574043Z", "id": "CVE-2026-2034", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-24T14:56:03.492Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-2034", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-02-24T14:55:25.574043Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-24T14:55:58.456Z"}}], "cna": {"title": "Sante DICOM Viewer Pro DCM File Parsing Buffer Overflow Remote Code Execution Vulnerability", "source": {"lang": "en", "value": "Anonymous"}, "metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "Sante", "product": "DICOM Viewer Pro", "versions": [{"status": "affected", "version": "14.2.6.0"}], "defaultStatus": "unknown"}], "datePublic": "2026-02-13T14:14:03.637Z", "references": [{"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-104/", "name": "ZDI-26-104", "tags": ["x_research-advisory"]}], "dateAssigned": "2026-02-06T01:10:06.709Z", "descriptions": [{"lang": "en", "value": "Sante DICOM Viewer Pro DCM File Parsing Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28129."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-120", "description": "CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}]}], "providerMetadata": {"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi", "dateUpdated": "2026-02-20T22:12:39.490Z"}}}, "cveMetadata": {"cveId": "CVE-2026-2034", "state": "PUBLISHED", "dateUpdated": "2026-02-24T14:56:03.492Z", "dateReserved": "2026-02-06T01:10:06.683Z", "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "datePublished": "2026-02-20T22:12:39.490Z", "assignerShortName": "zdi"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "DICOM Viewer Pro", "vendor": "Sante", "versions": [{"status": "affected", "version": "14.2.6.0"}]}], "source": "zdi-disclosures@trendmicro.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:santesoft:dicom_viewer_pro:*:*:*:*:*:*:*:*", "matchCriteriaId": "84A452DD-8C58-4685-B755-9CFB21E22781", "versionEndExcluding": "14.2.7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Sante DICOM Viewer Pro DCM File Parsing Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28129."}, {"lang": "es", "value": "Vulnerabilidad de desbordamiento de b\u00fafer de an\u00e1lisis de archivos DCM con ejecuci\u00f3n remota de c\u00f3digo de Sante DICOM Viewer Pro. Esta vulnerabilidad permite a atacantes remotos ejecutar c\u00f3digo arbitrario en instalaciones afectadas de Sante DICOM Viewer Pro. Se requiere interacci\u00f3n del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una p\u00e1gina maliciosa o abrir un archivo malicioso.\n\nLa falla espec\u00edfica existe dentro del an\u00e1lisis de archivos DCM. El problema resulta de la falta de validaci\u00f3n adecuada de la longitud de los datos proporcionados por el usuario antes de copiarlos a un b\u00fafer. Un atacante puede aprovechar esta vulnerabilidad para ejecutar c\u00f3digo en el contexto del proceso actual. Fue ZDI-CAN-28129."}], "id": "CVE-2026-2034", "lastModified": "2026-06-17T10:30:10.413", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "zdi-disclosures@trendmicro.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-2034", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-02-24T14:55:25.574043Z", "version": "2.0.3"}}]}, "published": "2026-02-20T23:16:03.233", "references": [{"source": "zdi-disclosures@trendmicro.com", "tags": ["Third Party Advisory"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-104/"}], "sourceIdentifier": "zdi-disclosures@trendmicro.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-120"}], "source": "zdi-disclosures@trendmicro.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "14.2.6.0"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "DICOM Viewer Pro", "source": "cna", "vendor": "Sante"}, "product": "dicom_viewer_pro", "vendor": "sante"}], "analysis": {"en": {"generated_at": "2026-04-18T11:25:00.388751+00:00", "value": {"mitigation_remediation": ["Apply the latest vendor patch or upgrade to the most recent release that fixes the buffer\u2011overflow issue (CWE\u2011120).", "If a patch is not yet available, enforce strict input validation by verifying the file size and length fields before copying data into buffers to prevent buffer overflows (CWE\u2011120).", "Disable or restrict the ability to open untrusted DCM files, or sandbox the application to contain any potential exploit (CWE\u2011120 mitigation)."], "summary": {"action": "Immediate Patch", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "The flaw affects all installations of Sante DICOM Viewer Pro. The product name is Sante DICOM Viewer Pro, but the CVE data does not specify vulnerable versions, so all supported releases should be considered at risk until a vendor update is released.", "description_and_impact": "The vulnerability is a classic buffer overflow in the DCM file parser that allows a remote attacker to execute arbitrary code in the context of the running process. Because the input length is not validated before copying, an attacker can craft a malicious file and trigger the overflow, leading to full remote code execution.", "risk_and_exploitability": "The CVSS score of 7.8 indicates high severity, while the EPSS score of less than 1% suggests low probability of widespread exploitation at present. Nevertheless, the vulnerability is not listed in the CISA KEV catalog, and exploitation requires user interaction: the target must open a malicious DCM file or visit a malicious page that triggers the parser. Once exploited, the attacker can run arbitrary code with the privileges of the current process."}}}}, "created": "2026-02-23T14:34:56.321088+00:00", "updated": "2026-04-18T11:30:44.320996+00:00", "vendors": ["sante", "sante$PRODUCT$dicom_viewer_pro"]}