Security Advisory

CVE-2025-48429

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-16 21:32:51
Last updated 2025-12-17 18:50:24
Assigner talos
State PUBLISHED

Description

An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to leaking heap data. An attacker can provide a malicious file to trigger this vulnerability.