CVE-2025-3482
Published: 22 May 2025
Summary
CVE-2025-3482 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Meddream Pacs Server. Its CVSS base score is 7.8 (High).
Operationally, ranked in the top 13.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
The vulnerability is a stack-based buffer overflow in DICOM file parsing within MedDream PACS Server, tracked as ZDI-CAN-25826. It stems from insufficient validation of the length of user-supplied data before it is copied into a fixed-length stack buffer, enabling remote code execution on affected installations. The issue carries a CVSS 3.1 score of 7.8 and is also identified under CWE-121.
Remote attackers can exploit the flaw without authentication by delivering a crafted DICOM file to the server. Successful exploitation grants arbitrary code execution in the context of the service account.
The Zero Day Initiative published advisory ZDI-25-244 detailing the issue. The EPSS score remains flat at a peak and current value of 0.0307, indicating no material increase in observed exploitation interest after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-16100
Vulnerability details
MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw…
more
exists within the parsing of DICOM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-25826.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.