Back to Database
Status published
High
CVE-2025-5307
Santesoft Sante DICOM Viewer Pro Out-of-bounds Read
Vulnerability Description
Santesoft Sante DICOM Viewer Pro contains a memory corruption vulnerability. A local attacker could exploit this issue to potentially disclose information and to execute arbitrary code on affected installations of Sante DICOM Viewer Pro.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-5307
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Michael Heinzl reported this vulnerability to CISA.
References
More from Santesoft
View All →CVE-2025-54862
Santesoft Sante PACS Server Cross-site Scripting
Medium
4.8
CVE-2025-54759
Santesoft Sante PACS Server Cross-site Scripting
Medium
5.1
CVE-2025-54156
Santesoft Sante PACS Server Cleartext Transmission of Sensitive Information
Critical
9.1
CVE-2025-53948
Santesoft Sante PACS Server Double Free
High
8.7
CVE-2025-2480
Santesoft Sante DICOM Viewer Pro Out-of-bounds Write
High
8.4
Affected Vendor
Santesoft
View all reports →Affected Software
Sante DICOM Viewer Pro
Vulnerable Versions:
0
Timeline
Official Publish:
May 29th, 2025
Last Modified:
May 30th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H