Vulnerability · Published Jun 10, 2025 · Assigned by icscert
CVE-2025-5943MicroDicom DICOM Viewer Out-of-bounds Write
High 8.8
In plain English
A high-severity out-of-bounds write in DICOM Viewer from MicroDicom. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.8%top 44.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
MicroDicom DICOM Viewer suffers from an out-of-bounds write vulnerability. Remote attackers are able to exploit this issue to potentially execute arbitrary code on affected installations of DICOM Viewer. User interaction is required to exploit the vulnerability in that the user must either visit a malicious website or open a malicious DICOM file locally.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| MicroDicom | DICOM Viewer | 0 – through 2025.2 (Build 8154) |
Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H