Alerts This Week
Warning Icon 1 914
Alerts This Week
Warning Icon 1 914

Mageia: dcmtk Important Memory Corruption Vulnerability MGASA-2025-0265

mageia
Calendar Grey November 7, 2025
Dist Mageia Esm H88
Updated dcmtk packages in Mageia fix vulnerabilities for local access leading to memory corruption. Apply patches promptly.
MGASA-2025-0265 - Updated dcmtk packages fix security vulnerabilities

Summary

Description: A vulnerability was identified in DCMTK up to 3.6.9. This affects an unknown function in the library dcmimage/include/dcmtk/dcmimage/diybrpxt.h of the component dcm2img. Such manipulation leads to memory corruption. Local access is required to approach this attack. The name of the patch is 7ad81d69b. It is best practice to apply a patch to resolve this issue.

References

- https://bugs.mageia.org/show_bug.cgi?id=34718

- https://lists.debian.org/debian-lts-announce/2025/11/msg00006.html

- https://www.cve.org/CVERecord?id=CVE-2025-9732

Topics%20covered

Topics Covered

security advisory memory corruption important attack Mageia dcmtk

Resolution

SRPMS

- 9/core/dcmtk-3.6.7-4.6.mga9

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 07 Nov 2025
URL: https://advisories.mageia.org/MGASA-2025-0265.html
Type: security
CVE: CVE-2025-9732

Topics%20covered

Topics Covered

security advisory memory corruption important attack Mageia dcmtk

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here