Skip to content
OpenAdvisories
High ICSMA-25-128-01 3 CVEs

Pixmeo OsiriX MD

Published May 8, 2025 · Updated May 8, 2025

Vendor: Pixmeo Product: OsiriX MD

Summary

Successful exploitation of these vulnerabilities could allow an attacker to cause memory corruption, resulting in a denial-of-service condition or to steal credentials.

Vulnerabilities 3

  • High 7.5
    CVE-2025-27578

    Pixmeo OsiriX MD Use After Free

    Pixmeo OsiriX MD is vulnerable to a use after free scenario, which could allow an attacker to upload a crafted DICOM file and cause memory corruption leading to a denial-of-service condition.

    Pixmeo OsiriX MD
  • High 7.4
    CVE-2025-27720

    Pixmeo OsiriX MD Cleartext Transmission of Sensitive Information

    The Pixmeo Osirix MD Web Portal sends credential information without encryption, which could allow an attacker to steal credentials.

    Pixmeo OsiriX MD
  • Medium 6.2
    CVE-2025-31946

    Pixmeo OsiriX MD Use After Free

    Pixmeo OsiriX MD is vulnerable to a local use after free scenario, which could allow an attacker to locally import a crafted DICOM file and cause memory corruption or a system crash.

    Pixmeo OsiriX MD

Revision history

  1. #1

    Initial Publication

References