Vulnerability

Santesoft Sante FFT Imaging 1.4.1 has an out-of-bounds write in DCM file handling

MedDevice Cyber Staff · Mar 5 · 2 min read · Via CISA ICSMA-24-065-01

CISA published advisory ICSMA-24-065-01 on March 5, 2024, covering CVE-2024-1696 in Santesoft Sante FFT Imaging versions 1.4.1 and prior. Michael Heinzl reported it.

The flaw is an out-of-bounds write (CWE-787, CVSS v3 7.8). Once a user opens a malicious DCM file, a local attacker could write past a buffer and execute arbitrary code in the application. The user has to open the file, so delivery runs through email, shared drives or media from outside the facility.

Santesoft released version 1.4.2 and recommends users update to it or later. CISA's interim advice targets the delivery path: do not click links or open attachments in unsolicited email.

Every DICOM file from outside your walls is untrusted input, and a viewer that parses it in native code deserves the same patch cadence as a browser.

Are you a representative of Santesoft? Submit an official response →

Remediation Desk

For ProvidersOperators, hospitals, and clinical engineering

Update Sante FFT Imaging to version 1.4.2 or later. Until every workstation is updated, treat DCM files from email or outside sources as untrusted and do not open unsolicited attachments.

Install version 1.4.2. Update every Sante FFT Imaging installation at 1.4.1 or earlier.
Control file intake. Route outside DICOM files through a controlled import path instead of email attachments.
Train on unsolicited attachments. Remind imaging staff not to open DCM files or links from unsolicited messages.

For Device ManufacturersAm I affected, and how to fix the class

Am I affected?

This class applies to devices with the signals and properties below. Check them against your product to gauge exposure. The named product rows list what the sources state about the affected product.

Required

DICOM or image parsing

Contributing

File import Named operating system

Sante FFT Imaging

DICOM or image parsing

Fix the class in your product

A crafted file drives the parser out of bounds. As the maker, validate every length and offset against the real buffer before you copy, decode in a sandboxed least-privilege process, and fuzz the path continuously so the next bug is yours to find.

Bound every copy. Check declared sizes against allocated buffers before memcpy; prefer memory-safe parsers for new work.
Sandbox the decoder. Run it least-privilege and isolated so a crash or exploit is contained, not privileged.
Fuzz as a release gate. Run malformed-input fuzzing on every file-format parser before shipping.

Mapped EMB3D mitigations

Products potentially also affected

Products whose own public documentation shares this advisory's attributes. A shared attribute is a lead, not a finding. The status column shows only what each manufacturer has said.

Product	Manufacturer	Shared with this advisory	Manufacturer status
Monaco RTP System	Elekta	Same property (MITRE EMB3D)PID-3122	No feedback feed from manufacturer
WatchMate Software	Anumana	Same signals	No feedback feed from manufacturer
Vitrea Software Package	Canon Medical	Same signals	No feedback feed from manufacturer
Image Suite	Carestream Health	Same signals	No feedback feed from manufacturer
aPROMISE	Exini Diagnostics	Same signals	No feedback feed from manufacturer
AutoSeg	Fujifilm Healthcare	Same signals	No feedback feed from manufacturer
Synapse PACS	Fujifilm Healthcare	Same signals	No feedback feed from manufacturer
BreView	GE HealthCare	Same signals	No feedback feed from manufacturer
EchoPAC Software Only / EchoPAC Plug-in	GE HealthCare	Same signals	No feedback feed from manufacturer
MR Contour DL	GE HealthCare	Same signals	No feedback feed from manufacturer
Contour ProtégéAI+	MIM Software	Same signals	No feedback feed from manufacturer
Image Management V15	Philips	Same signals	No feedback feed from manufacturer
OptimMRI	Rebrain	Same signals	No feedback feed from manufacturer
syngo Application Software	Siemens Healthineers	Same signals	No feedback feed from manufacturer
Glaucoma Module	Topcon Healthcare	Same signals	No feedback feed from manufacturer

1 more products match. Each manufacturer page lists its products and the advisories they share attributes with.

Questions & Answers

What is CVE-2024-1696 in Sante FFT Imaging?

CVE-2024-1696 is an out-of-bounds write (CWE-787, CVSS v3 7.8) in Santesoft Sante FFT Imaging 1.4.1 and prior. Opening a malicious DCM file could let a local attacker execute arbitrary code. CISA published it as ICSMA-24-065-01 on March 5, 2024.

Which Sante FFT Imaging version fixes CVE-2024-1696?

Santesoft fixed CVE-2024-1696 in Sante FFT Imaging version 1.4.2 and recommends updating to 1.4.2 or later, per CISA advisory ICSMA-24-065-01 from March 5, 2024.

← Back to Vulnerabilities