CVE-2025-25475

Summary

CVE-2025-25475 is a denial-of-service vulnerability affecting DCMTK v3.6.9+ DEV. The issue lies within the /libsrc/dcrleccd.cc component and arises from a NULL pointer dereference. An adversary can exploit this flaw by crafting a malicious DICOM file to trigger the NULL pointer dereference and cause the system to crash, resulting in a denial-of-service condition.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.