CVE-2025-3484

CRITICAL

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installatio...

Affects 1 product across 1 vendor.

CVSS 3.09.8
EPSS1.0%
Percentile61th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-121: Stack-Based Buffer Overflow

Buffer overflow corrupting the program stack, typically overwriting the return address for code execution.

◆ AI Analysis — automated analysis, not human-reviewed

A critical vulnerability in MedDream PACS Server allows remote attackers to execute arbitrary code due to a stack-based buffer overflow in the DICOM file parsing module. No authentication is required for exploitation.

BSID: BS-2025-GLOBAL-258169-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2025-3484?
A critical vulnerability in MedDream PACS Server allows remote attackers to execute arbitrary code due to a stack-based buffer overflow in the DICOM file parsing module. No authentication is required for exploitation.
What is the CVSS score for CVE-2025-3484?
CVE-2025-3484 has CVSS 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 1.0%.
Is CVE-2025-3484 actively exploited?
No confirmed active exploitation of CVE-2025-3484 as of 2026-09-25.
How do I remediate CVE-2025-3484?
Priority: IMMEDIATE.
What systems are affected by CVE-2025-3484?
CVE-2025-3484 affects Meddream Pacs Server.
Vulnerability Details
CVE IDCVE-2025-3484
BSIDBS-2025-GLOBAL-258169-C BreachSpider Global ID
CVSS VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2025-05-22
Last Modified2026-06-17
ICS Relevance15%
Weakness (CWE)
Stack-Based Buffer Overflow
SourceNVD
Official Description

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of DICOM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-25853.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability is triggered by sending a specially crafted DICOM file to the MedDream PACS Server. The server fails to properly validate the input, leading to a buffer overflow that can be exploited to execute arbitrary code on the system.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductAffected Versions
Meddream Pacs Server < 7.3.5.860
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 512 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash186a71fbb47a5d6f23b28dfe1b8aae0805ec6be5d576bec3860dee7c180425619b06272e08f6aa6d6729744f71d8298842bce1f6123ca91579b3b65706383b0a
Related CVEs affecting Meddream
CVE-2025-27724 9.8 A privilege escalation vulnerability exists in the login.php functionality of... CVE-2025-26469 9.8 An incorrect default permissions vulnerability exists in the CServerSettings:... CVE-2020-37009 8.8 MedDream PACS Server 6.8.3.751 contains an authenticated remote code executio... CVE-2025-53912 8.1 An arbitrary file read vulnerability exists in the encapsulatedDoc functional... CVE-2025-3482 7.8 MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Co...
View all Meddream CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →