MicroDicom DICOM Viewer Out-of-Bounds Write Vulnerability Allowing Arbitrary Code Execution

Vulnerability

A vulnerability allowing out-of-bounds write has been identified in MicroDicom DICOM Viewer, specifically in versions through 2025.2 (Build 8154). This vulnerability can be exploited by remote attackers to execute arbitrary code on affected systems. Exploitation requires user interaction, such as visiting a malicious website or opening a compromised DICOM file locally.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.

Remediation

Users are advised to update MicroDicom DICOM Viewer to version 2025.3 or later.

Added: Jun 10, 2025, 6:47 PM
Updated: Jun 10, 2025, 6:47 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
10.0
exploitability
6.4
remediation
7.7
relevance
0.2
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.