CVE-2025-31946

Pixmeo OsiriX MD is vulnerable to a local use after free scenario, which could allow an attacker to locally import a crafted DICOM file and cause memory corruption or a system crash...

CVE-2025-31946

Pixmeo OsiriX MD is vulnerable to a local use after free scenario, which could allow an attacker to locally import a crafted DICOM file and cause memory corruption or a system crash...

CVE-2025-27578

Pixmeo OsiriX MD is vulnerable to a use after free scenario, which could allow an attacker to upload a crafted DICOM file and cause memory corruption leading to a denial-of-service condition...

CVE-2025-27720

The Pixmeo Osirix MD Web Portal sends credential information without encryption, which could allow an attacker to steal credentials...

CVE-2025-31946

The CVE-2025-31946 entry concerns Pixmeo OsiriX MD vulnerability to a local use-after-free triggered by importing a crafted DICOM file, leading to memory corruption or a system crash. Affected product: OsiriX MD; vulnerability arises from local handling of DICOM input (component/filepath/process ...

CVE-2025-31946 Pixmeo OsiriX MD Use After Free

Pixmeo OsiriX MD is vulnerable to a local use after free scenario, which could allow an attacker to locally import a crafted DICOM file and cause memory corruption or a system crash...

CVE-2025-27578 Pixmeo OsiriX MD Use After Free

Pixmeo OsiriX MD is vulnerable to a use after free scenario, which could allow an attacker to upload a crafted DICOM file and cause memory corruption leading to a denial-of-service condition...

CVE-2025-27578 Pixmeo OsiriX MD Use After Free

Pixmeo OsiriX MD is vulnerable to a use after free scenario, which could allow an attacker to upload a crafted DICOM file and cause memory corruption leading to a denial-of-service condition...

CVE-2025-27578

The CVE-2025-27578 entry concerns Pixmeo OsiriX MD, where a use-after-free in processing uploaded DICOM files can cause memory corruption and a denial-of-service. Affected component: OsiriX MD (DICOM handling). Root cause: use-after-free leading to memory corruption; impact per sources is a DoS c...

CISA Releases Five Industrial Control Systems Advisories

CISA released five Industrial Control Systems ICS advisories on May 8, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-128-01 Horner Automation Cscape ICSA-25-128-02 Hitachi Energy RTU500 series ICSA-25-128-03...

PT-2025-20436 · Pixmeo · Osirix Md

Name of the Vulnerable Software and Affected Versions: Pixmeo OsiriX MD affected versions not specified Description: The issue is related to a local use after free scenario. An attacker could locally import a crafted DICOM file, potentially causing memory corruption or a system crash...

Pixmeo OsiriX MD 资源管理错误漏洞

Pixmeo OsiriX MD is a medical image processing software from Pixmeo designed for DICOM image analysis and 3D reconstruction. Pixmeo OsiriX MD suffers from a resource management error vulnerability that originates from local reuse after release, which could result in memory corruption or a system...

PT-2025-20435 · Pixmeo · Pixmeo Osirix Md Web Portal

Name of the Vulnerable Software and Affected Versions: Pixmeo Osirix MD Web Portal affected versions not specified Description: The issue concerns the transmission of credential information without encryption by the Pixmeo Osirix MD Web Portal, potentially allowing an attacker to steal credential...

PT-2025-20434 · Pixmeo · Osirix Md

Name of the Vulnerable Software and Affected Versions: Pixmeo OsiriX MD affected versions not specified Description: The issue is related to a use after free scenario, which could allow an attacker to upload a crafted DICOM file and cause memory corruption, leading to a denial-of-service conditio...

SUSE CVE-2025-22126

In the Linux kernel, the following vulnerability has been resolved: md: fix mddev uaf while iterating allmddevs list While iterating allmddevs list from mdnotifyreboot and mdexit, listforeachentrysafe is used, and this can race with deletint the next mddev, causing UAF: t1: spinlock...

SUSE CVE-2025-22125

In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: don't ignore IO flags If blk-wbt is enabled by default, it's found that raid write performance is quite bad because all IO are throttled by wbt of underlying disks, due to flag REQIDLE is ignored. And turns out...

CVE-2025-22125

In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: don't ignore IO flags If blk-wbt is enabled by default, it's found that raid write performance is quite bad because all IO are throttled by wbt of underlying disks, due to flag REQIDLE is ignored. And turns out...

CVE-2025-22124

In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: fix wrong bitmaplimit for clustermd when write sb In clustermd, separate write-intent-bitmaps are used for each cluster node: 0 4k 8k 12k ------------------------------------------------------------------- | idle | ...

CVE-2025-22125

In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: don't ignore IO flags If blk-wbt is enabled by default, it's found that raid write performance is quite bad because all IO are throttled by wbt of underlying disks, due to flag REQIDLE is ignored. And turns out...

DEBIAN-CVE-2025-22126

In the Linux kernel, the following vulnerability has been resolved: md: fix mddev uaf while iterating allmddevs list While iterating allmddevs list from mdnotifyreboot and mdexit, listforeachentrysafe is used, and this can race with deletint the next mddev, causing UAF: t1: spinlock...