https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-53619.htmlhttps://patchthecve.com/cve/CVE-2025-53619.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.4: An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.The function `null_convert` is called based of https://patchthecve.com/cve/CVE-2025-53618.htmlhttps://patchthecve.com/cve/CVE-2025-53618.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.4: An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.The function `grayscale_convert` is called basehttps://patchthecve.com/cve/CVE-2025-52582.htmlhttps://patchthecve.com/cve/CVE-2025-52582.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.4: An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.https://patchthecve.com/cve/CVE-2025-48429.htmlhttps://patchthecve.com/cve/CVE-2025-48429.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.4: An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to leaking heap data. An attacker can provide a malicious file to trigger this vulnerability.