Out-of-bounds Write Vulnerability in MicroDicom DICOM Viewer
CVE-2025-35975

8.8HIGH

Key Information:

Vendor
Microdicom
Status
Dicom Viewer
Vendor
CVE Published:
1 May 2025

Summary

MicroDicom DICOM Viewer contains an out-of-bounds write vulnerability that can be exploited through specially crafted DCM files. When a user opens such a file, it may allow an attacker to execute arbitrary code on the affected system, posing significant risks to data integrity and user security. It is crucial for users to apply the latest updates to mitigate this risk.

Affected Version(s)

DICOM Viewer 0 <= 2025.1

References

https://www.cisa.gov/news-events/ics-medical-advisories/i...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Michael Heinzl reported these vulnerabilities to CISA.
.
CVE-2025-35975 : Out-of-bounds Write Vulnerability in MicroDicom DICOM Viewer | SecurityVulnerability.io