PT-2025-35413 · Dcmtk+3 · Dcmtk+3

0X20Z · Published 2025-08-15 · Updated 2025-11-07 · CVE-2025-9732

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DCMTK versions up to 3.6.9

Description A memory corruption issue was identified in the dcm2img component of the DCMTK library, specifically within the dcmimage/include/dcmtk/dcmimage/diybrpxt.h library file. Local access is required for exploitation.

Recommendations Apply the patch 7ad81d69b to resolve this issue.

Exploit

Fix

DoS

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-787

Related Identifiers

ALT-PU-2025-11781

ALT-PU-2025-11785

BDU:2025-13144

CVE-2025-9732

DLA-4363-1

MGASA-2025-0265

OPENSUSE-SU-2025:15504-1

Affected Products

Alt Linux

Dcmtk

Debian

Red Os

References · 34

• 🔥 https://github.com/DCMTK/dcmtk/commit/7ad81d69b · Exploit
• https://bdu.fstec.ru/vul/2025-13144 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15504-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/GD2WBT5HVV2CPZXA5XBAJULHMWVFG4CH · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-9732 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-9732 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4363-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9732 · Security Note
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-9732 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/YL2K27Y4IAGLVR6JFDAM27GCPMYTX5H7 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/G3ABTA2JPSPRPQOLHE76JHOXTQYRCFFR · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-9732 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/Q66R7FDLMGCURB3G2EHEXGLREEF3CZRT · Vendor Advisory