IM
IronMonkey Threat Research
‹ Back to ICS Advisories

Medixant RadiAnt DICOM

MEDIUM
CVSS 4.3
Date 2026-08-06T06:00:00+00:00
Source cisa-csaf
Published by CISA

// Description

Successful exploitation of this vulnerability could allow an attacker to cause the application to crash if a maliciously crafted DICOM file is opened.

// Vulnerabilities (1)

CVE ID CVSS Score Severity Description
CVE-2026-17264 4.3 medium
Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker-controlled heap out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.

// Remediations (1)

Mitigation: Users should update to version 2026.1. It is also recommended to open DICOM files only from trusted
Users should update to version 2026.1. It is also recommended to open DICOM files only from trusted and reliable sources. Additionally, the application is compiled with exploit mitigation mechanisms enabled, including Control Flow Guard (CFG), Data Execution Prevention (DEP), and Address Space Layout Randomization (ASLR), which significantly reduces the practical exploitability of the issue.

// References