Memory Corruption Vulnerability in Sante DICOM Viewer Pro by Santesoft
CVE-2025-5307

8.4HIGH

Key Information:

Vendor

Santesoft

Status
Sante Dicom Viewer Pro
Vendor
CVE Published:
29 May 2025

What is CVE-2025-5307?

Sante DICOM Viewer Pro has been identified with a memory corruption vulnerability that could allow a local attacker to exploit the issue. This could potentially lead to the disclosure of sensitive information and enable the execution of arbitrary code on systems running the affected software. Organizations using this product should ensure they are aware of these risks and take necessary precautions to mitigate the potential for attacks.

Affected Version(s)

Sante DICOM Viewer Pro 0 <= 14.2.1

References

https://www.cisa.gov/news-events/ics-medical-advisories/i...
https://www.santesoft.com/win/sante-dicom-viewer-pro/down...

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Michael Heinzl reported this vulnerability to CISA.
.
CVE-2025-5307 : Memory Corruption Vulnerability in Sante DICOM Viewer Pro by Santesoft