CVE-2025-2581

A vulnerability has been found in xmedcon 0.25.0 and classified as problematic. Affected by this vulnerability is the function malloc of the component DICOM File Handler. The manipulation leads to integer underflow. The attack can be launched remotely. Upgrading to version 0.25.1 is able to address this issue. It is recommended to upgrade the affected component.
References
Link Resource
https://vuldb.com/?ctiid.300541 Permissions Required VDB Entry
https://vuldb.com/?id.300541 Third Party Advisory VDB Entry
https://vuldb.com/?submit.522216 Third Party Advisory VDB Entry
https://xmedcon.sourceforge.io/Main/New Product VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:xmedcon_project:xmedcon:0.25.0:*:*:*:*:*:*:*

History

27 Mar 2025, 13:24

Type Values Removed Values Added
References () https://vuldb.com/?id.300541 - () https://vuldb.com/?id.300541 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.522216 - () https://vuldb.com/?submit.522216 - Third Party Advisory, VDB Entry
References () https://xmedcon.sourceforge.io/Main/New - () https://xmedcon.sourceforge.io/Main/New - Product, VDB Entry
References () https://vuldb.com/?ctiid.300541 - () https://vuldb.com/?ctiid.300541 - Permissions Required, VDB Entry
First Time Xmedcon Project xmedcon
Xmedcon Project
CPE cpe:2.3:a:xmedcon_project:xmedcon:0.25.0:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 4.3
v2 : unknown
v3 : 7.5

21 Mar 2025, 05:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-03-21 05:15

Updated : 2025-03-27 13:24


NVD link : CVE-2025-2581

Mitre link : CVE-2025-2581


JSON object : View

Products Affected

xmedcon_project

  • xmedcon
CWE
CWE-191

Integer Underflow (Wrap or Wraparound)

CWE-189

Numeric Errors