CISA 2026-08-06

Medixant RadiAnt DICOM

CVE-2026-17264

Machine-generated analysis · WAYSCloud LLM

RadiAnt DICOM versions up to 2025.2 are vulnerable to a heap out-of-bounds write triggered by crafted DICOM files.

Context

The advisory concerns Medixant RadiAnt DICOM, a DICOM viewer application. Opening a malicious DICOM file containing JPEG-compressed pixel data can trigger a heap out-of-bounds write that may cause the application to crash or enable remote code execution. The vendor recommends updating to version 2026.1 and notes that the application already includes CFG, DEP, and ASLR mitigations, which reduce practical exploitability.

Operator considerations

Check: verify the installed RadiAnt version is 2025.2 or earlier.
Patch: upgrade to RadiAnt version 2026.1.
Isolate: process DICOM files only on systems that receive files from trusted and reliable sources.
Log: monitor for unexpected RadiAnt crashes or error events related to DICOM file handling.

From Cybersecurity and Infrastructure Security Agency ↗

Successful exploitation of this vulnerability could allow an attacker to cause the application to crash if a maliciously crafted DICOM file is opened.

The following versions of Medixant RadiAnt DICOM are affected:

RadiAnt DICOM

Read the full advisory on CISA →