High severity · published Jun 10, 2025
CVE-2025-5943
MicroDicom DICOM Viewer Out-of-bounds Write
8.8
CVSS
0.7%
EPSS
No
On KEV
Description
MicroDicom
DICOM Viewer suffers from an out-of-bounds write vulnerability. Remote attackers are able to exploit this issue to potentially execute arbitrary code on affected installations of DICOM Viewer. User interaction is required to exploit the vulnerability in that the user must either visit a malicious website or open a malicious DICOM file locally.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DV
DICOM Viewer · MicroDicom
through 2025.2 (Build 8154) · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-5943
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-5943
www.cisa.gov
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-160-01
More from DICOM Viewer
8.8
CVE-2025-36521
MicroDicom DICOM Viewer Out-of-bounds Read
8.8
CVE-2025-35975
MicroDicom DICOM Viewer Out-of-bounds Write
8.8
CVE-2024-33606
MicroDicom DICOM Viewer Improper Authorization in Handler for Custom URL Scheme
8.8
CVE-2024-28877
MicroDicom DICOM Viewer Stack-based Buffer Overflow
7.8
CVE-2024-25578
MicroDicom DICOM Viewer Out-of-Bounds Write