CVE-2025-2581

MEDIUM

xmedcon 0.25.0 - Integer Underflow in DICOM File Handler

Title source: llm

Description

A vulnerability has been found in xmedcon 0.25.0 and classified as problematic. Affected by this vulnerability is the function malloc of the component DICOM File Handler. The manipulation leads to integer underflow. The attack can be launched remotely. Upgrading to version 0.25.1 is able to address this issue. It is recommended to upgrade the affected component.

References (5)

Core 5

Core References

Mailing List

https://lists.debian.org/debian-lts-announce/2025/07/msg00000.html

Third Party Advisory, VDB Entry vdb-entry technical-description

https://vuldb.com/?id.300541

Permissions Required, VDB Entry signature permissions-required

https://vuldb.com/?ctiid.300541

Third Party Advisory, VDB Entry third-party-advisory

https://vuldb.com/?submit.522216

Product, VDB Entry patch

https://xmedcon.sourceforge.io/Main/New

Scores

CVSS v3 4.3

EPSS 0.0052

EPSS Percentile 40.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-191 CWE-189

Status published

Products (1)

xmedcon_project/xmedcon 0.25.0

Published Mar 21, 2025

Tracked Since Feb 18, 2026