CVE-2025-9732: DCMTK dcm2img diybrpxt.h memory corruption
A vulnerability was identified in DCMTK up to 3.6.9. This affects an unknown function in the library dcmimage/include/dcmtk/dcmimage/diybrpxt.h of the component dcm2img. Such manipulation leads to memory corruption. Local access is required to approach this attack. The name of the patch is 7ad81d69b. It is best practice to apply a patch to resolve this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
DCMTK dcm2imgto a version that resolves this vulnerability.Patch 7ad81d69b
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9732?
CVE-2025-9732 is classified as a high severity vulnerability due to its potential for memory corruption.
How do I fix CVE-2025-9732?
To fix CVE-2025-9732, update to the latest version of DCMTK, specifically beyond version 3.6.9.
What component is affected by CVE-2025-9732?
CVE-2025-9732 affects the dcm2img component of the DCMTK software library.
Is local access required to exploit CVE-2025-9732?
Yes, local access is required to exploit CVE-2025-9732.
What type of vulnerability is CVE-2025-9732?
CVE-2025-9732 is a memory corruption vulnerability.