CVE-2025-9732
A vulnerability was identified in DCMTK up to 3.6.9. This affects an unknown function in the library dcmimage/include/dcmtk/dcmimage/diybrpxt.h of the component dcm2img. Such manipulation leads to memory corruption. Local access is required to approach this attack. The name of the patch is 7ad81d69b. It is best practice to apply a patch to resolve this issue.
- Score
- CVSS 3.1 7.8 High
- Status
- Analyzed - cna@vuldb.com
- Published
- 2025-08-31
- Last modified
- 2026-10-19
- Weaknesses
- CWE-119, CWE-787
Affected products
References
- https://vuldb.com/?id.322023
- https://vuldb.com/?ctiid.322023
- https://vuldb.com/?submit.639772
- https://github.com/DCMTK/dcmtk/commit/7ad81d69b
