CVE-2025-2581

5.3 mediumEPSS 0.6%

Medium (5.3) in xmedcon project xmedcon. EPSS 0.6% chance of exploitation in the next 30 days.

A vulnerability has been found in xmedcon 0.25.0 and classified as problematic. Affected by this vulnerability is the function malloc of the component DICOM File Handler. The manipulation leads to integer underflow. The attack can be launched remotely. Upgrading to version 0.25.1 is able to address this issue. It is recommended to upgrade the affected component.

Severity

CVSS 4.0

5.3 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWEs: CWE-191, CWE-189
Published: 2025-03-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

xmedcon_project:xmedcon

References

https://vuldb.com/?ctiid.300541
https://vuldb.com/?id.300541
https://vuldb.com/?submit.522216
https://xmedcon.sourceforge.io/Main/New
https://lists.debian.org/debian-lts-announce/2025/07/msg00000.html

Check your stack JSON