CVE-2024-28130 is an incorrect type conversion vulnerability in the DVPSSoftcopyVOI_PList::createFromImage function of OFFIS DCMTK version 3.6.8. A specially crafted malformed file can trigger this flaw, potentially leading to arbitrary code execution without user interaction or privileges.