CVE-2025-2581CWE-191

xmedcon DICOM File malloc integer underflow

Medium · published March 21, 2025

CVSS v4.0
5.3
EPSS
1%
Percentile
50.0
In the wild
Unconfirmed
What it is

A vulnerability has been found in xmedcon 0.25.0 and classified as problematic. Affected by this vulnerability is the function malloc of the component DICOM File Handler. The manipulation leads to integer underflow. The attack can be launched remotely. Upgrading to version 0.25.1 is able to address this issue. It is recommended to upgrade the affected component.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00640 · 50.0th percentile
Weakness
CWE-191 · Integer Underflow (Wrap or Wraparound)
Published
2025-03-21T05:00Z
EPSS history
Timeline
  • 21 MAR 05:00Z
    xmedcon DICOM File malloc integer underflow
    cvelistv5