CVE-2025-25475 Affecting dcmtk package, versions *
Threat Intelligence
Exploit Maturity
Exploit maturity not defined.
Not Defined
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-DEBIAN12-DCMTK-8738009
- published20 Feb 2025
- disclosed18 Feb 2025
Introduced: 18 Feb 2025
NewCVE-2025-25475 (opens in a new tab)Common Vulnerabilities and Exposures (CVE) are common identifiers for publicly known security vulnerabilities
How to fix?
There is no fixed version for Debian:12 dcmtk.
NVD Description
Note: Versions mentioned in the description apply only to the upstream dcmtk package and not the dcmtk package as distributed by Debian.
See How to fix? for Debian:12 relevant fixed versions and status.
A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DICOM file.