high7.5
CVE-2025-25475
A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DICOM fi…
Impact
A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DICOM file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Offis | Dcmtk | Version 3.6.9 |
| Debian | Debian Linux | Version 11.0 |