CVE-2025-2581 xmedcon DICOM File malloc integer underflow

A vulnerability has been found in xmedcon 0.25.0 and classified as problematic. Affected by this vulnerability is the function malloc of the component DICOM File Handler. The manipulation leads to integer underflow. The attack can be launched remotely. Upgrading to version 0.25.1 is able to addre...

PT-2025-12392 · Xmedcon +1 · Xmedcon +1

Name of the Vulnerable Software and Affected Versions: xmedcon version 0.25.0 Description: A problem has been detected in the malloc function of the DICOM File Handler component, leading to an integer underflow. This issue can be exploited remotely. Recommendations: For xmedcon version 0.25.0,...

CVE-2024-29421

CVE-2024-29421 affects xmedcon up to version 0.23.0, with a fix in 0.24.0. The vulnerability is a buffer overflow in libs/dicom/basic.c that can enable an attacker to execute arbitrary code. This is confirmed by OSV entries and related advisories. Remediation: upgrade to xmedcon 0.24.0 . If upgra...