CVE-2025-2029: falha de média gravidade em MicroDicom DICOM Viewer
MicroDicom DICOM Viewer mDicom.exe memory corruption
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.8epss 0.2%
A vulnerability was found in MicroDicom DICOM Viewer 2025.1 Build 3321. It has been classified as critical. Affected is an unknown function of the file mDicom.exe. The manipulation leads to memory corruption. The attack needs to be approached locally. It is recommended to upgrade the affected component. The vendor quickly confirmed the existence of the vulnerability and fixed it in the latest beta.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
MicroDicom · DICOM ViewerCVEs relacionadas — MicroDicom DICOM Viewer
No mesmo produto, das mais perigosas para as menos.
CVE-2025-5943HIGHMicroDicom DICOM Viewer Out-of-bounds WriteEPSS 0.8%CVE-2024-28877HIGHMicroDicom DICOM Viewer Stack-based Buffer OverflowEPSS 0.7%CVE-2025-35975HIGHMicroDicom DICOM Viewer Out-of-bounds WriteEPSS 0.6%CVE-2025-36521HIGHMicroDicom DICOM Viewer Out-of-bounds ReadEPSS 0.5%CVE-2024-33606HIGHMicroDicom DICOM Viewer Improper Authorization in Handler for Custom URL SchemeEPSS 0.5%CVE-2024-22100HIGHMicroDicom DICOM Heap-based Buffer OverflowEPSS 0.3%