Out-Of-Bounds Write Vulnerability in Sante DICOM Viewer Pro

CVE-2025-5481

What is CVE-2025-5481?

A vulnerability exists within the parsing process of DCM files in Sante DICOM Viewer Pro, allowing remote attackers to execute arbitrary code. By sending specially crafted DCM files, attackers can exploit insufficient validation of user-supplied data, leading to a write operation beyond the boundary of allocated memory. This situation opens the door for executing code in the context of the affected application, thereby compromising the security of the system. The exploitation requires user interaction as the target must either visit a malicious webpage or open a compromised file.

References