CVE-2025-2029 - CVE House
Back to Database
Status published Medium CVE-2025-2029

MicroDicom DICOM Viewer mDicom.exe memory corruption

Vulnerability Description

A vulnerability was found in MicroDicom DICOM Viewer 2025.1 Build 3321. It has been classified as critical. Affected is an unknown function of the file mDicom.exe. The manipulation leads to memory corruption. The attack needs to be approached locally. It is recommended to upgrade the affected component. The vendor quickly confirmed the existence of the vulnerability and fixed it in the latest beta.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-2029

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • 0x20z (VulDB User)

References

More from MicroDicom

View All →
CVE-2025-5943
MicroDicom DICOM Viewer Out-of-bounds Write
High 8.6
CVE-2025-36521
MicroDicom DICOM Viewer Out-of-bounds Read
High 8.6
CVE-2025-35975
MicroDicom DICOM Viewer Out-of-bounds Write
High 8.6
CVE-2025-1002
MicroDicom DICOM Viewer Improper Certificate Validation
Medium 5.7
CVE-2024-33606
MicroDicom DICOM Viewer Improper Authorization in Handler for Custom URL Scheme
High 8.6

Affected Vendor

Affected Software

DICOM Viewer
Vulnerable Versions:
2025.1 Build 3321

Timeline

Official Publish: March 6th, 2025
Last Modified: March 6th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-119

MITRE ATT&CK TTPs

T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1203 Exploitation for Client Execution
Execution
T1055 Process Injection
Defense Evasion
T1105 Ingress Tool Transfer
Command and Control