CVE-2025-25472

Summary

CVE-2025-25472 is a buffer overflow vulnerability affecting DCMTK git master v3.6.9 and later. This issue can be exploited by attackers to cause a Denial of Service (DoS) by providing a specially crafted DCM file. The buffer overflow occurs due to improper handling of data in the DCMTK software, allowing malicious input to exceed the intended limit and overwrite adjacent memory. Successful exploitation of this vulnerability may result in the application crashing or becoming unresponsive, denying legitimate users access to the affected system. It is recommended that users of DCMTK upgrade to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.