Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-48429

Опубликовано: 16 дек. 2025
Источник: nvd
CVSS3: 7.4
CVSS3: 9.1
EPSS Низкий

Описание

An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to leaking heap data. An attacker can provide a malicious file to trigger this vulnerability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:malaterre:grassroots_dicom:3.0.24:*:*:*:*:*:*:*

EPSS

Процентиль: 17%
0.00055
Низкий

7.4 High

CVSS3

9.1 Critical

CVSS3

Дефекты

CWE-119
CWE-125

Связанные уязвимости

CVSS3: 7.4
ubuntu
около 2 месяцев назад

An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to leaking heap data. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 7.4
debian
около 2 месяцев назад

An out-of-bounds read vulnerability exists in the RLECodec::DecodeBySt ...

CVSS3: 7.4
github
около 2 месяцев назад

An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to leaking heap data. An attacker can provide a malicious file to trigger this vulnerability.

EPSS

Процентиль: 17%
0.00055
Низкий

7.4 High

CVSS3

9.1 Critical

CVSS3

Дефекты

CWE-119
CWE-125