An out-of-bounds write in the parser for .gdt files in Dräger CC-Vision Basic and CC-Vision E-Cal can overflow a buffer. A crafted file causes the application to crash or launch arbitrary code on the host. The flaw carries a CVSS score of 8.3, indicating high severity and the potential for remote code execution.

Dräger CC-Vision Basic versions prior to 7.5.3 and Dräger CC-Vision E-Cal versions prior to 7.2.5.0 are vulnerable. These medical imaging products are used in clinical settings, so any device running an affected version falls under the impact scope.

The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, but the high CVSS score and lack of defensive mitigations suggest a considerable risk. The attack vector likely involves supplying a malicious .gdt file to the vulnerable application, which could be achieved remotely if the system accepts files from a network share or locally by an attacker with file‑system access. No immediate official workaround was published, so the principal mitigation is upgrading to a fixed release. Without an upgrade, the flaw could allow an attacker to compromise device integrity and availability.