{"id":"CVE-2025-2029","state":"PUBLISHED","title":"MicroDicom DICOM Viewer mDicom.exe memory corruption","description":"A vulnerability was found in MicroDicom DICOM Viewer 2025.1 Build 3321. It has been classified as critical. Affected is an unknown function of the file mDicom.exe. The manipulation leads to memory corruption. The attack needs to be approached locally. It is recommended to upgrade the affected component. The vendor quickly confirmed the existence of the vulnerability and fixed it in the latest beta.","publishedAt":"2025-03-06T15:00:11.035Z","updatedAt":"2025-03-06T16:07:02.574Z","severity":{"score":4.8,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","source":"VulDB"},"assigner":"VulDB","products":["MicroDicom DICOM Viewer"],"affected":[{"vendor":"MicroDicom","product":"DICOM Viewer","versions":[{"version":"2025.1 Build 3321","status":"affected"}]}],"references":["https://vuldb.com/?id.298770","https://vuldb.com/?ctiid.298770","https://vuldb.com/?submit.506579","https://www.microdicom.com/beta.html"],"weaknesses":["CWE-119"],"ingestedAt":"2026-10-29T20:08:55.257Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/2xxx/CVE-2025-2029.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-2029","state":"PUBLISHED","datePublished":"2025-03-06T15:00:11.035Z","dateUpdated":"2025-03-06T16:07:02.574Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2025-03-06T08:35:26.796Z"},"containers":{"cna":{"title":"MicroDicom DICOM Viewer mDicom.exe memory corruption","descriptions":[{"lang":"en","value":"A vulnerability was found in MicroDicom DICOM Viewer 2025.1 Build 3321. It has been classified as critical. Affected is an unknown function of the file mDicom.exe. The manipulation leads to memory corruption. The attack needs to be approached locally. It is recommended to upgrade the affected component. The vendor quickly confirmed the existence of the vulnerability and fixed it in the latest beta."},{"lang":"de","value":"Es wurde eine kritische Schwachstelle in MicroDicom DICOM Viewer 2025.1 Build 3321 ausgemacht. Es betrifft eine unbekannte Funktion der Datei mDicom.exe. Durch Beeinflussen mit unbekannten Daten kann eine memory corruption-Schwachstelle ausgenutzt werden. Der Angriff hat dabei lokal zu erfolgen. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen."}],"affected":[{"vendor":"MicroDicom","product":"DICOM Viewer","versions":[{"version":"2025.1 Build 3321","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.298770","name":"VDB-298770 | MicroDicom DICOM Viewer mDicom.exe memory corruption","tags":["vdb-entry"]},{"url":"https://vuldb.com/?ctiid.298770","name":"VDB-298770 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.506579","name":"Submit #506579 | MicroDicom MicroDicomViewer 2025.1(Build3321) Memory Access Violation","tags":["third-party-advisory"]},{"url":"https://www.microdicom.com/beta.html","tags":["patch"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":4.8,"vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":5.3,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":5.3,"vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":4.3,"vectorString":"AV:L/AC:L/Au:S/C:P/I:P/A:P"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-119","type":"CWE","lang":"en","description":"Memory Corruption"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2025-03-06T15:00:11.035Z"},"timeline":[{"time":"2025-03-06T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-03-06T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-03-06T09:40:59.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"0x20z (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-03-06T16:06:52.496391Z","id":"CVE-2025-2029","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-06T16:07:02.574Z"}}]}}}