Santesoft Sante DICOM Viewer Pro

An attacker could cause an unpatched DICOM viewer to crash or execute malicious code by convincing a user to open a specially crafted DICOM medical image file, potentially compromising the workstation and access to patient or operational data.

This affects any facility using Santesoft Sante DICOM Viewer Pro for diagnostic imaging or medical record review, including hospital workstations, radiology departments, and any clinical staff who review medical images. The vulnerability requires user interaction, so the risk is primarily to individual workstations rather than network-wide systems.

An attacker would need to deliver a malicious DICOM file to a user of Sante DICOM Viewer Pro. The user must then open the file in the vulnerable application. When the viewer processes the crafted file, the out-of-bounds read could disclose sensitive information from memory or be leveraged to achieve code execution on that workstation.