CVE-2025-5943: high-severity vulnerability in MicroDicom DICOM Viewer
MicroDicom DICOM Viewer Out-of-bounds Write
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.6epss 0.8%
MicroDicom
DICOM Viewer suffers from an out-of-bounds write vulnerability. Remote attackers are able to exploit this issue to potentially execute arbitrary code on affected installations of DICOM Viewer. User interaction is required to exploit the vulnerability in that the user must either visit a malicious website or open a malicious DICOM file locally.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
MicroDicom · DICOM ViewerRelated CVEs — MicroDicom DICOM Viewer
In the same product, most dangerous first.
CVE-2024-28877HIGHMicroDicom DICOM Viewer Stack-based Buffer OverflowEPSS 0.7%CVE-2025-35975HIGHMicroDicom DICOM Viewer Out-of-bounds WriteEPSS 0.6%CVE-2025-36521HIGHMicroDicom DICOM Viewer Out-of-bounds ReadEPSS 0.5%CVE-2024-33606HIGHMicroDicom DICOM Viewer Improper Authorization in Handler for Custom URL SchemeEPSS 0.5%CVE-2024-22100HIGHMicroDicom DICOM Heap-based Buffer OverflowEPSS 0.3%CVE-2024-25578HIGHMicroDicom DICOM Viewer Out-of-Bounds WriteEPSS 0.2%