Malaterre Grassroots Dicom — known CVE vulnerabilities

Every CVE whose affected-product data names Malaterre Grassroots Dicom, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2015-8396 — CVSS 10.0 (critical): Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots…
• CVE-2015-8397 — CVSS 8.2 (high): The JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows…
• CVE-2024-22373 — CVSS 8.1 (high): An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM…
• CVE-2024-22391 — CVSS 7.7 (high): A heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A…
• CVE-2025-53619 — CVSS 7.4 (high): An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted…
• CVE-2025-48429 — CVSS 7.4 (high): An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024. A specially crafted…
• CVE-2025-52582 — CVSS 7.4 (high): An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality of Grassroot DICOM 3.024. A specially…
• CVE-2025-53618 — CVSS 7.4 (high): An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted…
• CVE-2024-25569 — CVSS 6.5 (medium): An out-of-bounds read vulnerability exists in the RAWCodec::DecodeBytes functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A…