CVE-2025-3482
MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installatio...
Affects 1 product across 1 vendor.
Buffer overflow corrupting the program stack, typically overwriting the return address for code execution.
A stack-based buffer overflow vulnerability in the DICOM file parsing functionality of MedDream PACS Server allows remote attackers to execute arbitrary code without authentication.
BSID: BS-2025-GLOBAL-258166-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2025-3482?
What is the CVSS score for CVE-2025-3482?
Is CVE-2025-3482 actively exploited?
How do I remediate CVE-2025-3482?
What systems are affected by CVE-2025-3482?
| CVE ID | CVE-2025-3482 |
|---|---|
| BSID | BS-2025-GLOBAL-258166-H BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| Published | 2025-05-22 |
| Last Modified | 2026-06-17 |
| ICS Relevance | 15% |
| Weakness (CWE) | |
| Source | NVD |
MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of DICOM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-25826.
Source: NIST NVD / MITRE CVE Database
The vulnerability is triggered by improper validation of DICOM files during parsing, enabling an attacker to craft a malicious DICOM file that, when processed by the server, results in a buffer overflow and potential remote code execution.
Exploitation Likelihood: HIGH
| Vendor | Product | Affected Versions |
|---|---|---|
| Meddream | Pacs Server | < 7.3.5.860 |
No official vendor advisory link on record. See the CVE record →
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 6e9eb05025e179dc624bce7fe7ed44b90b77c62441f0f9b7887ed7a4401a499ae66b10437a6bd7466591c4f78986fda50a322625869cda36187b7c4dc602df73 |
ICS/OT Vulnerability Intelligence for Your Environment
BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.
Create a free account →