PT-2025-23211 · Santesoft · Sante Dicom Viewer Pro

Michael Heinzl · Published 2025-05-29 · Updated 2025-11-26 · CVE-2025-5307

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Santesoft Sante DICOM Viewer Pro (affected versions not specified)

Description The issue is a memory corruption vulnerability that could be exploited by a local attacker to potentially disclose information and execute arbitrary code on affected installations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-5307

Affected Products

Sante Dicom Viewer Pro

References · 12

• https://osv.dev/vulnerability/CVE-2025-5307 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-5307 · Security Note
• https://t.me/cveNotify/138865 · Telegram Post
• https://t.me/latest_high_impact_cve/2495 · Telegram Post
• https://t.me/cvetracker/24944 · Telegram Post
• https://twitter.com/dailycve/status/1993819390127821148 · Twitter Post
• https://twitter.com/cybercronai/status/1928307986188923252 · Twitter Post
• https://twitter.com/CVEnew/status/1928218996064583960 · Twitter Post
• https://cisa.gov/news-events/ics-medical-advisories/icsma-25-148-01 · Note
• https://twitter.com/CveFindCom/status/1928219856303706520 · Twitter Post
• https://twitter.com/gryphai/status/1929127364027387991 · Twitter Post
• https://santesoft.com/win/sante-dicom-viewer-pro/download.html · Note