VulnerabilityDeferred

CVE-2025-5943

MicroDicom DICOM Viewer suffers from an out-of-bounds write vulnerability.

HIGH 8.6EPSS 0.72%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.72%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

MicroDicom DICOM Viewer suffers from an out-of-bounds write vulnerability. Remote attackers are able to exploit this issue to potentially execute arbitrary code on affected installations of DICOM Viewer. User interaction is required to exploit the vulnerability in that the user must either visit a malicious website or open a malicious DICOM file locally.

CVSS 4.0: 8.6 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.72% probability · 52th percentile
CISA KEV: Not listed
Weakness: CWE-787
Source: ics-cert@hq.dhs.gov

References

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-160-01

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.