CyberzSOC

Publication detail
← Back to advisories & guidance

ICSMA-25-121-01: MicroDicom DICOM Viewer ↗ source

May 1, 2025 CISA ICS Medical Advisory
Source: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-121-01

Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose information, cause memory corruption, and execute arbitrary code. CVE-2025-35975: MicroDicom DICOM Viewer is vulnerable to an out-of-bounds write which may allow an attacker to execute arbitrary code. The user must open a malicious DCM file for exploitation. CVE-2025-36521: MicroDicom DICOM Viewer is vulnerable to an out-of-bounds read which may allow an attacker to cause memory corruption within the application. The user must open a malicious DCM file for exploitation.

Advisory Details CISA ICS CSAF feed

Advisory ID
ICSMA-25-121-01
Status
Final · version 2
Initial release
2025-05-01
Last revised
2025-05-06 (2 revisions)
Vendor
MicroDicom
Critical infrastructure sectors
Healthcare and Public Health
Deployed
Worldwide
Vendor headquarters
Bulgaria

CISA also recommends users take the following measures to protect themselves from social engineering attacks:

Do not click web links or open attachments in unsolicited email messages.

Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams.

Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks.

No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.

Credit: Michael Heinzl

Affected products (1)
  • DICOM Viewer — <=2025.1_Build_3321
Revision history (2)
  • 2025-05-06 — v2: Revision - Fixing typos
  • 2025-05-01 — v1: Initial Publication

From CISA's machine-readable CSAF 2.0 advisory (JSON).

Vulnerabilities as Stated by the Advisory

CVEWeaknessCVSS v3Details
CVE-2025-35975 CWE-787 Out-of-bounds Write 8.8 High MicroDicom DICOM Viewer is vulnerable to an out-of-bounds write which may allow an attacker to execute arbitrary code. The user must open a malicious DCM file for exploitation.

Vendor fix: MicroDicom recommends user update DICOM Viewer to version 2025.2 or later. ↗

Affected, fixed & timeline

Affected:

  • DICOM Viewer <=2025.1_Build_3321
CVE-2025-36521 CWE-125 Out-of-bounds Read 8.8 High MicroDicom DICOM Viewer is vulnerable to an out-of-bounds read which may allow an attacker to cause memory corruption within the application. The user must open a malicious DCM file for exploitation.

Vendor fix: MicroDicom recommends user update DICOM Viewer to version 2025.2 or later. ↗

Affected, fixed & timeline

Affected:

  • DICOM Viewer <=2025.1_Build_3321

Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.

News Coverage

No coverage found in monitored research blogs or news feeds.

CVEs Referenced in This Publication

CVECVSSAffected
CVE-2025-35975 8.8 High MicroDicom DICOM Viewer MicroDicom DICOM Viewer is vulnerable to an out-of-bounds write which may allow an attacker to execute arbitrary code. The user must open a malicious…
CVE-2025-36521 8.8 High MicroDicom DICOM Viewer MicroDicom DICOM Viewer is vulnerable to an out-of-bounds read which may allow an attacker to cause memory corruption within the application. The use…

Named by the advisory itself. Each CVE links to its tracked detail page.

Vendors Named in This Publication

No KEV-catalogued vendors are named in this publication.