CVE-2025-9732

Medium

Description

A vulnerability was identified in DCMTK up to 3.6.9. This affects an unknown function in the library dcmimage/include/dcmtk/dcmimage/diybrpxt.h of the component dcm2img. Such manipulation leads to memory corruption. Local access is required to approach this attack. The name of the patch is 7ad81d69b. It is best practice to apply a patch to resolve this issue.

SeverityMedium

CVSS5.3

Exploit probability—

ProductOffis Dcmtk

PublishedAug 31, 2025

First seenAug 31, 2025

Weakness typeCWE-119Memory buffer bounds error

How to fix

Patches

github.com/DCMTK/dcmtk/commit/7ad81d69b

Affected products

Product	Affected versions	Fixed in
offis dcmtk	v ≤ 3.6.9	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.