PT-2025-35413 · Dcmtk+3 · Dcmtk+3

0X20Z · CVE-2025-9732 · Published 2025-08-15 · Updated 2025-11-07

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DCMTK versions up to 3.6.9

Description A memory corruption issue was identified in the dcm2img component of the DCMTK library, specifically within the dcmimage/include/dcmtk/dcmimage/diybrpxt.h library file. Local access is required for exploitation.

Recommendations Apply the patch 7ad81d69b to resolve this issue.

Exploit

Fix

DoS

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

Related Identifiers

ALT-PU-2025-11781

ALT-PU-2025-11785

BDU:2025-13144

CVE-2025-9732

DLA-4363-1

MGASA-2025-0265

OPENSUSE-SU-2025:15504-1

Affected Products

Alt Linux

Dcmtk

Debian

Red Os

References · 35

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9732.json · Exploit
• 🔥 https://github.com/DCMTK/dcmtk/commit/7ad81d69b · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-9732 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0265.html · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/AOPGN6HZZAWIMEUTKDAXXEEMBBFMMXJY · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9732 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/Q66R7FDLMGCURB3G2EHEXGLREEF3CZRT · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/GD2WBT5HVV2CPZXA5XBAJULHMWVFG4CH · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-9732 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0265 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4363-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/YL2K27Y4IAGLVR6JFDAM27GCPMYTX5H7 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-9732 · Vendor Advisory