CVE-2024-42845: Invesalius

High severity, CVSS 8.0. EPSS: 2.7% chance of exploitation in the next 30 days.

An eval Injection vulnerability in the component invesalius/reader/dicom.py of InVesalius 3.1.99991 through 3.1.99998 allows attackers to execute arbitrary code via loading a crafted DICOM file.

Affected products

• Invesalius Invesalius: from 3.1.99991, up to and including 3.1.99998

Published 2024-08-23. Last modified 2026-06-17.