Medium severity · published Mar 6, 2025
CVE-2025-2029
MicroDicom DICOM Viewer mDicom.exe memory corruption
5.3
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability was found in MicroDicom DICOM Viewer 2025.1 Build 3321. It has been classified as critical. Affected is an unknown function of the file mDicom.exe. The manipulation leads to memory corruption. The attack needs to be approached locally. It is recommended to upgrade the affected component. The vendor quickly confirmed the existence of the vulnerability and fixed it in the latest beta.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 7% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DV
DICOM Viewer · MicroDicom
2025.1 Build 3321 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-2029
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-2029
vuldb.com
https://vuldb.com/?ctiid.298770
vuldb.com
https://vuldb.com/?id.298770
vuldb.com
https://vuldb.com/?submit.506579
www.microdicom.com
https://www.microdicom.com/beta.html
More from DICOM Viewer
8.8
CVE-2025-5943
MicroDicom DICOM Viewer Out-of-bounds Write
8.8
CVE-2025-36521
MicroDicom DICOM Viewer Out-of-bounds Read
8.8
CVE-2025-35975
MicroDicom DICOM Viewer Out-of-bounds Write
8.8
CVE-2024-33606
MicroDicom DICOM Viewer Improper Authorization in Handler for Custom URL Scheme
8.8
CVE-2024-28877
MicroDicom DICOM Viewer Stack-based Buffer Overflow