Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-11266

Опубликовано: 12 дек. 2025
Источник: nvd
CVSS3: 6.6
EPSS Низкий

Описание

An out-of-bounds write vulnerability exists in the Grassroots DICOM library (GDCM). The issue is triggered during parsing of a malformed DICOM file containing encapsulated PixelData fragments (compressed image data stored as multiple fragments). This vulnerability leads to a segmentation fault caused by an out-of-bounds memory access due to unsigned integer underflow in buffer indexing. It is exploitable via file input, simply opening a crafted malicious DICOM file is sufficient to trigger the crash, resulting in a denial-of-service condition.

EPSS

Процентиль: 3%
0.00017
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 6.6
ubuntu
около 2 месяцев назад

An out-of-bounds write vulnerability exists in the Grassroots DICOM library (GDCM). The issue is triggered during parsing of a malformed DICOM file containing encapsulated PixelData fragments (compressed image data stored as multiple fragments). This vulnerability leads to a segmentation fault caused by an out-of-bounds memory access due to unsigned integer underflow in buffer indexing. It is exploitable via file input, simply opening a crafted malicious DICOM file is sufficient to trigger the crash, resulting in a denial-of-service condition.

CVSS3: 6.6
debian
около 2 месяцев назад

An out-of-bounds write vulnerability exists in the Grassroots DICOM li ...

CVSS3: 6.6
github
около 2 месяцев назад

An out-of-bounds write vulnerability exists in the Grassroots DICOM library (GDCM). The issue is triggered during parsing of a malformed DICOM file containing encapsulated PixelData fragments (compressed image data stored as multiple fragments). This vulnerability leads to a segmentation fault caused by an out-of-bounds memory access due to unsigned integer underflow in buffer indexing. It is exploitable via file input, simply opening a crafted malicious DICOM file is sufficient to trigger the crash, resulting in a denial-of-service condition.

EPSS

Процентиль: 3%
0.00017
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-787