CVE-2025-36521: Microdicom Dicom Viewer

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

MicroDicom DICOM Viewer is vulnerable to an out-of-bounds read which may allow an attacker to cause memory corruption within the application. The user must open a malicious DCM file for exploitation.

Affected products

• Microdicom Dicom Viewer: up to and including 2025.1

Published 2025-05-01. Last modified 2026-06-17.