CVE-2025-2263 | BDVDB-2026-270271 Detail

Description#

During login to the web server in "Sante PACS Server.exe", OpenSSL function EVP_DecryptUpdate is called to decrypt the username and password. A fixed 0x80-byte stack-based buffer is passed to the function as the output buffer. A stack-based buffer overflow exists if a long encrypted username or password is supplied by an unauthenticated remote attacker.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-03-13Record published in the CVE List.
2. Version 22025-03-14Most recent update recorded in the CVE List.