CVE-2025-35975: Microdicom Dicom Viewer

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

MicroDicom DICOM Viewer is vulnerable to an out-of-bounds write which may allow an attacker to execute arbitrary code. The user must open a malicious DCM file for exploitation.

Affected products

• Microdicom Dicom Viewer: up to and including 2025.1

Published 2025-05-01. Last modified 2026-06-17.