VULNERABILITY INTELLIGENCE
CVE-2025-36521
CVSS score8.8 HIGH
EPSS probability0.46%
CISA KEVNot currently listed
Published2025-05-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
MicroDicom DICOM Viewer is vulnerable to an out-of-bounds read which may allow an attacker to cause memory corruption within the application. The user must open a malicious DCM file for exploitation.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-125