Vulnerability

Santesoft Sante FFT Imaging has an out-of-bounds read when parsing DICOM files

MedDevice Cyber Staff · Oct 12 · 2 min read · Via CISA ICSMA-23-285-02

CISA published advisory ICSMA-23-285-02 on October 12, 2023, for Santesoft Sante FFT Imaging, versions 1.4.0 and earlier. Michael Heinzl reported CVE-2023-5059, an out-of-bounds read (CWE-125) with a CVSS v3 base score of 7.8.

The application does not properly validate user-supplied data when it parses DICOM files. A crafted file can trigger the out-of-bounds read, and CISA says an attacker could use it to disclose information and execute arbitrary code in the context of the current process. The vector is local and needs the user to open the file.

DICOM files move between sites on discs, USB drives and email attachments as a matter of routine. That makes opening a file from outside an everyday act for a radiology reader, and it is the only interaction this exploit needs.

Santesoft released Sante FFT Imaging 1.4.1 and recommends updating. Parsers that read attacker-supplied images should be fuzzed before every release, because the image format is the attack surface.

Are you a representative of Santesoft? Submit an official response →

Remediation Desk

For ProvidersOperators, hospitals, and clinical engineering

Update Sante FFT Imaging to version 1.4.1 on every workstation. Until then, open DICOM files only from trusted sources. Run the application under a standard user account so a successful exploit gets limited rights.

Install 1.4.1. Replace Sante FFT Imaging 1.4.0 and earlier with 1.4.1 from Santesoft.
Vet incoming DICOM files. Treat DICOM files from email, USB and outside discs as untrusted until checked.
Drop admin rights. Run the viewer as a standard user, since code runs in the context of the current process.
Fuzz parsers in design. Fuzz DICOM and image parsing paths as part of every release cycle.

For Device ManufacturersAm I affected, and how to fix the class

Am I affected?

This class applies to devices with the signals and properties below. Check them against your product to gauge exposure. The named product rows list what the sources state about the affected product.

Required

DICOM or image parsing

Contributing

File import Removable media

Sante FFT Imaging

DICOM or image parsing File import

Fix the class in your product

A crafted file drives the parser out of bounds. As the maker, validate every length and offset against the real buffer before you copy, decode in a sandboxed least-privilege process, and fuzz the path continuously so the next bug is yours to find.

Bound every copy. Check declared sizes against allocated buffers before memcpy; prefer memory-safe parsers for new work.
Sandbox the decoder. Run it least-privilege and isolated so a crash or exploit is contained, not privileged.
Fuzz as a release gate. Run malformed-input fuzzing on every file-format parser before shipping.

Mapped EMB3D mitigations

Products potentially also affected

Products whose own public documentation shares this advisory's attributes. A shared attribute is a lead, not a finding. The status column shows only what each manufacturer has said.

Product	Manufacturer	Shared with this advisory	Manufacturer status
WatchMate Software	Anumana	Same signals	No feedback feed from manufacturer
Vitrea Software Package	Canon Medical	Same signals	No feedback feed from manufacturer
Image Suite	Carestream Health	Same signals	No feedback feed from manufacturer
aPROMISE	Exini Diagnostics	Same signals	No feedback feed from manufacturer
AutoSeg	Fujifilm Healthcare	Same signals	No feedback feed from manufacturer
Synapse PACS	Fujifilm Healthcare	Same signals	No feedback feed from manufacturer
BreView	GE HealthCare	Same signals	No feedback feed from manufacturer
EchoPAC Software Only / EchoPAC Plug-in	GE HealthCare	Same signals	No feedback feed from manufacturer
MR Contour DL	GE HealthCare	Same signals	No feedback feed from manufacturer
Contour ProtégéAI+	MIM Software	Same signals	No feedback feed from manufacturer
Image Management V15	Philips	Same signals	No feedback feed from manufacturer
OptimMRI	Rebrain	Same signals	No feedback feed from manufacturer
syngo Application Software	Siemens Healthineers	Same signals	No feedback feed from manufacturer
Glaucoma Module	Topcon Healthcare	Same signals	No feedback feed from manufacturer
ARIA Radiation Therapy Management	Varian	Same signals	No feedback feed from manufacturer

Questions & Answers

What is CVE-2023-5059 in Sante FFT Imaging?

CVE-2023-5059 is an out-of-bounds read (CWE-125, CVSS v3 7.8) in DICOM file parsing in Santesoft Sante FFT Imaging 1.4.0 and earlier that could allow information disclosure and arbitrary code execution. CISA disclosed it in advisory ICSMA-23-285-02 on October 12, 2023, crediting Michael Heinzl.

Which Sante FFT Imaging version fixes the DICOM vulnerability?

Santesoft Sante FFT Imaging 1.4.1 fixes CVE-2023-5059, per CISA advisory ICSMA-23-285-02. Santesoft recommends updating from 1.4.0 or earlier.

← Back to Vulnerabilities