Description
Pixmeo OsiriX MD is vulnerable to a local use after free scenario, which could allow an attacker to locally import a crafted DICOM file and cause memory corruption or a system crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Pixmeo | OsiriX MD | ≤ 14.0.1 (Build 2024-02-28) | — |
Advisories 1
- ICSMA-25-128-01 Pixmeo OsiriX MD CISA ICS & IT advisories · May 8, 2025