CVE-2020-6152

CVE-2020-6152 is a high-severity code execution vulnerability affecting Accusoft ImageGear 19.7, specifically within its DICOM parse_dicom_meta_info functionality. An attacker can exploit this by providing a malicious DICOM file, leading to an out-of-bounds write. The vulnerability has a CVSS score of 7.8 (High), indicating a local attack vector with low complexity, requiring user interaction, and potentially resulting in high confidentiality, integrity, and availability impacts. While there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB) is unavailable, and it has garnered significant community discussion with 10 mentions.