Grassroots Dicom vulnerabilities

6 known vulnerabilities in Grassroots Dicom from Malaterre. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Grassroot DICOM: Out-of-bounds Read

  CVE-2025-53619Dec 16, 2025Grassroot DICOM

  An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.The fun

• 9.1 Critical severity

  Grassroot DICOM: Out-of-bounds Read

  CVE-2025-53618Dec 16, 2025Grassroot DICOM

  An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.The fun

• 7.5 High severity

  Grassroot DICOM: Out-of-bounds Read

  CVE-2025-52582Dec 16, 2025Grassroot DICOM

  An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.

• 9.1 Critical severity

  Grassroot DICOM: Out-of-bounds Read

  CVE-2025-48429Dec 16, 2025Grassroot DICOM

  An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to leaking heap data. An attacker can provide a malicious file to trigger this vulnerability.

• 9.8 Critical severity

  Grassroot DICOM: Out-of-bounds Write

  CVE-2024-22391Apr 25, 2024Grassroot DICOMEPSS 1.39%

  A heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this v

• 9.8 Critical severity

  Grassroot DICOM: Out-of-bounds Write

  CVE-2024-22373Apr 25, 2024Grassroot DICOMEPSS 1.65%

  An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted DICOM file can lead to a heap buffer overflow. An attacker can provide a malicious file to tr