CVE Intelligence

Grassroot DICOM vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Grassroot DICOM products: 4 record(s), with severity, exploitation and fixes.

Grassroot DICOM 4

Exploited only (KEV) →

CVE-2025-53619 Critical · 9.1 CWE-125 Dec 16, 2025
Out-of-bounds Read in Malaterre Grassroots Dicom
An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.The function `null_convert` is called based of the value of the malicious DICOM file specifying the intended interpretation of the image pixel data
CVE-2025-53618 Critical · 9.1 CWE-125 Dec 16, 2025
Out-of-bounds Read in Malaterre Grassroots Dicom
An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.The function `grayscale_convert` is called based of the value of the malicious DICOM file specifying the intended interpretation of the image pixel data
CVE-2025-52582 High · 7.5 CWE-125 Dec 16, 2025
Out-of-bounds Read in Malaterre Grassroots Dicom
An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2025-48429 Critical · 9.1 CWE-125 Dec 16, 2025
Out-of-bounds Read in Malaterre Grassroots Dicom
An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to leaking heap data. An attacker can provide a malicious file to trigger this vulnerability.