CVE-2025-14607: OFFIS DCMTK dcmdata dcbytstr.cc makeDicomByteString memory corruption
A vulnerability was detected in OFFIS DCMTK up to 3.6.9. Affected by this issue is the function DcmByteString::makeDicomByteString of the file dcmdata/libsrc/dcbytstr.cc of the component dcmdata. The manipulation results in memory corruption. The attack can be launched remotely. Upgrading to version 3.7.0 can resolve this issue. The patch is identified as 4c0e5c10079392c594d6a7abd95dd78ac0aa556a. You should upgrade the affected component.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14607?
CVE-2025-14607 is classified as a medium severity vulnerability that can lead to memory corruption.
How do I fix CVE-2025-14607?
To fix CVE-2025-14607, upgrade to a version of OFFIS DCMTK that is greater than 3.6.9.
What software is affected by CVE-2025-14607?
CVE-2025-14607 affects OFFIS DCMTK versions up to 3.6.9.
Can CVE-2025-14607 be exploited remotely?
Yes, CVE-2025-14607 can be launched as a remote attack.
What component of OFFIS DCMTK is impacted by CVE-2025-14607?
The affected component in OFFIS DCMTK is the dcmdata library, specifically the function DcmByteString::makeDicomByteString.