Skip to content
OpenAdvisories
High · 7.5 CVE-2025-27578 EUVD-2025-14837GHSA-m62j-8cr2-x42v

Pixmeo OsiriX MD Use After Free

Published May 8, 2025 · Updated May 9, 2025 · Assigned by icscert

Description

Pixmeo OsiriX MD is vulnerable to a use after free scenario, which could allow an attacker to upload a crafted DICOM file and cause memory corruption leading to a denial-of-service condition.

Affected products

VendorProductAffectedFixed
Pixmeo OsiriX MD ≤ 14.0.1 —

Advisories 1

References