CVE-2025-2480: Santesoft Dicom Viewer Pro

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Santesoft Sante DICOM Viewer Pro is vulnerable to an out-of-bounds write, which requires a user to open a malicious DCM file, resulting in execution of arbitrary code by a local attacker.

Affected products

• Santesoft Dicom Viewer Pro: before 14.2.0 (fixed in 14.2.0)

Published 2025-03-20. Last modified 2026-06-17.