CVE-2025-2357

Katalog CVE

CVSS 6.3 · Medium EPSS 0,44%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada offis dcmtk. Skor CVSS 3.1 6.3 (Medium) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability was found in DCMTK 3.6.9. It has been declared as critical. This vulnerability affects unknown code of the component dcmjpls JPEG-LS Decoder. The manipulation leads to memory corruption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 3239a7915. It is recommended to apply a patch to fix this issue.

Rincian

Terbit di NVD

17 Maret 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.3 (Medium), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

EPSS (30 hari)

0,44% peluang dieksploitasi; lebih tinggi dari 36,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.dcmtk.org/redmine/issues/1155 issue tracking · advisory vendor
• https://support.dcmtk.org/redmine/issues/1155?tab=history#note-1 issue tracking · advisory vendor
• https://vuldb.com/?id.299824 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.513692 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.299824 permissions required · vdb entry
• https://lists.debian.org/debian-lts-announce/2025/06/msg00025.html