CNNVD-202509-127 Information

CNNVD ID

CNNVD-202509-127

CVE-2025-9275

  • CNNVD Published: 2025-09-02

Description (Chinese)

Oxford Instruments Imaris Viewer是英国Oxford Instruments公司的一款查看和分析生物医学图像数据的软件。 Oxford Instruments Imaris Viewer存在缓冲区错误漏洞,该漏洞源于解析IMS文件时未验证用户输入导致越界写入,可能导致远程代码执行。

Description (English)

Oxford Industries Imaris Viewer is a British company, Oxford Industries, software for viewing and analysing biomedical image data. There is a buffer zone error loophole in Oxford Industries Imaris Viewer, which results from the unverified user input when the IMS file is deciphered, resulting in cross-border writing, which may lead to remote code execution.

Hazard Level

Medium

Vulnerability Type

缓冲区错误

Affected Vendor

Oxford Instruments

Published

2025-09-02

Last Modified

2026-02-24

References

https://www.zerodayinitiative.com/advisories/ZDI-25-854/ https://nvd.nist.gov/vuln/detail/CVE-2025-9275

Share on: