CVE-2026-46350

dcmjs is a JavaScript implementation of DICOM manipulation.

dcmjs is a JavaScript implementation of DICOM manipulation. Prior to 0.52.0, the DecimalString and IntegerString implementations in src/ValueRepresentation.js sanitize text with a permissive regular expression and pass the result to JavaScript's Number constructor without validating finiteness or the DICOM value-representation rules. Scientific notation overflow in a DS or IS field can produce positive or negative Infinity, while stripping alphabetic characters from signed…

5. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-46350