Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-14607

Опубликовано: 13 дек. 2025
Источник: nvd
CVSS3: 6.3
CVSS2: 6.5
EPSS Низкий

Описание

A vulnerability was detected in OFFIS DCMTK up to 3.6.9. Affected by this issue is the function DcmByteString::makeDicomByteString of the file dcmdata/libsrc/dcbytstr.cc of the component dcmdata. The manipulation results in memory corruption. The attack can be launched remotely. Upgrading to version 3.7.0 can resolve this issue. The patch is identified as 4c0e5c10079392c594d6a7abd95dd78ac0aa556a. You should upgrade the affected component.

EPSS

Процентиль: 15%
0.00243
Низкий

6.3 Medium

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 6.3
ubuntu
8 месяцев назад

A vulnerability was detected in OFFIS DCMTK up to 3.6.9. Affected by this issue is the function DcmByteString::makeDicomByteString of the file dcmdata/libsrc/dcbytstr.cc of the component dcmdata. The manipulation results in memory corruption. The attack can be launched remotely. Upgrading to version 3.7.0 can resolve this issue. The patch is identified as 4c0e5c10079392c594d6a7abd95dd78ac0aa556a. You should upgrade the affected component.

CVSS3: 6.3
redhat
8 месяцев назад

A vulnerability was detected in OFFIS DCMTK up to 3.6.9. Affected by this issue is the function DcmByteString::makeDicomByteString of the file dcmdata/libsrc/dcbytstr.cc of the component dcmdata. The manipulation results in memory corruption. The attack can be launched remotely. Upgrading to version 3.7.0 can resolve this issue. The patch is identified as 4c0e5c10079392c594d6a7abd95dd78ac0aa556a. You should upgrade the affected component.

CVSS3: 6.3
debian
8 месяцев назад

A vulnerability was detected in OFFIS DCMTK up to 3.6.9. Affected by t ...

CVSS3: 6.3
github
8 месяцев назад

A vulnerability was detected in OFFIS DCMTK up to 3.6.9. Affected by this issue is the function DcmByteString::makeDicomByteString of the file dcmdata/libsrc/dcbytstr.cc of the component dcmdata. The manipulation results in memory corruption. The attack can be launched remotely. Upgrading to version 3.7.0 can resolve this issue. The patch is identified as 4c0e5c10079392c594d6a7abd95dd78ac0aa556a. You should upgrade the affected component.

CVSS3: 6.3
fstec
8 месяцев назад

Уязвимость функции DcmByteString::makeDicomByteString компонента dcmdata/libsrc/dcbytstr.cc библиотеки для работы с форматом DICOM DCMTK, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 15%
0.00243
Низкий

6.3 Medium

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-119