# CVE-2025-53619: An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024…

Source: https://junglewise.ai/threats/cve-2025-53619-an-out-of-bounds-read-vulnerability-exists-in-the-jpegbitscodec  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-16  
License: CC BY 4.0 with a link back

CVE-2025-53619 · Severity: high · CVSS 7.4 · Published 2025-12-16

An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.The function `null_convert` is called based of the value of the malicious DICOM file specifying the intended interpretation of the image pixel data

Technologies: [Malaterre Grassroots Dicom](https://junglewise.ai/threats/technologies/grassroots-dicom). Vendors: [Malaterre](https://junglewise.ai/threats/vendors/malaterre).

## Quick answers

**Is CVE-2025-53619 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-53619 being exploited in the wild.

**How severe is CVE-2025-53619?** High severity, with a CVSS score of 7.4, published 16 December 2025.

**Which products and versions are affected?** Malaterre Grassroots Dicom. The advisory does not name versions.

**Is there a fix for CVE-2025-53619?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-53619?** Check whether you run Malaterre Grassroots Dicom. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Malaterre Grassroots Dicom

## Related threats

- [An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024…](https://junglewise.ai/threats/cve-2025-53618-an-out-of-bounds-read-vulnerability-exists-in-the-jpegbitscodec)
- [An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality of Grassroot DICOM…](https://junglewise.ai/threats/cve-2025-52582-an-out-of-bounds-read-vulnerability-exists-in-the-overlay)
- [An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024. A…](https://junglewise.ai/threats/cve-2025-48429-an-out-of-bounds-read-vulnerability-exists-in-the-rlecodec)