VULNERABILITY INTELLIGENCE
CVE-2025-31946
CVSS score6.2 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2025-05-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Pixmeo OsiriX MD is vulnerable to a local use after free scenario, which could allow an attacker to locally import a crafted DICOM file and cause memory corruption or a system crash.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-416