Read the docs

MicroDicom

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

MicroDicom records in CISA KEV

No MicroDicom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records in Dicom Viewer · all components

Priority MEDIUM 41

MicroDicom DICOM Viewer is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code on affected installations of DICOM Viewer.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.0068 Published 2024-06-11 Fixed in 2024.2 CWE-121
TI-2024-16811 CVE-2024-25578 · GHSA-rq76-jq4v-wrmq

MicroDicom DICOM Viewer Out-of-Bounds Write

Priority LOW 36

MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior contain a lack of proper validation of user-supplied data, which could result in memory corruption within the application.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00241 Published 2024-03-01 No fix listed CWE-787
TI-2024-14708 CVE-2024-22100 · GHSA-236w-6xxf-5g8v

MicroDicom DICOM Heap-based Buffer Overflow

Priority LOW 36

MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior are affected by a heap-based buffer overflow vulnerability, which could allow an attacker to execute arbitrary code on affected installations of DICOM Viewer…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00264 Published 2024-03-01 No fix listed CWE-122
Priority LOW 24

MicroDicom DICOM Viewer version 2024.03 fails to adequately verify the update server's certificate, which could make it possible for attackers in a privileged network position to alter network traffic and carry out a mac…

CVSS 4.0MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00108 Published 2025-02-10 No fix listed CWE-295
Open these records in search →