CVE-2024-29734

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Uncontrolled search path element issue exists in SonicDICOM Media Viewer 2.3.2 and earlier, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published
Apr 3, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-297355.3Improper Preservation of Permissions vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.8.2 through 2.8.3. Airflow's CVE-2024-297369.1A SSRF vulnerability in WADL service description in versions of Apache CXF before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform SSRF CVE-2024-297374.7In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not strict, allowing attackCVE-2024-297385.5In gov_init, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no aCVE-2024-297395.5In tmu_get_temp_lut of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disCVE-2024-29745.3The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to SeCVE-2024-297407.4In tmu_set_table of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priCVE-2024-297417.8In pblS2mpuResume of s2mpu.c, there is a possible mitigation bypass due to a logic error in the code. This could lead to local escalation ofCVE-2024-297425.5In apply_minlock_constraint of dvfs.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local informCVE-2024-297437.7In tmu_set_temp_lut of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of CVE-2024-297445.5In tmu_get_gov_time_windows, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discCVE-2024-297455.5there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional exe
CVE-2024-29734: High severity, CVSS 7.8 | Vulnix