CVE-2025-5307

Santesoft Sante DICOM Viewer Pro contains a memory corruption vulnerability. A local attacker could exploit this issue to potentially disclose information and to execute arbitrary code on affected installations of Sante DICOM Viewer Pro.

Score

CVSS 4.0 8.4 High

Status

Analyzed - ics-cert@hq.dhs.gov

Published

2025-05-29

Last modified

2025-05-30

Weaknesses

CWE-125

Affected products

• Dicom Viewer Pro (Santesoft)
• Sante Dicom Viewer Pro (Santesoft)

References

• https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-148-01
• https://www.santesoft.com/win/sante-dicom-viewer-pro/download.html