Description

An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.The function `null_convert` is called based of the value of the malicious DICOM file specifying the intended interpretation of the image pixel data

INFO

Published Date :

2025-12-16T21:32:55.141Z

Last Modified :

2025-12-17T18:49:53.333Z

Source :

talos
AFFECTED PRODUCTS

The following products are affected by CVE-2025-53619 vulnerability.

Vendors Products
Grassroots Dicom Project
  • Grassroots Dicom
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-53619.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact