Offis Dcmtk vulnerabilities

• offis dcmtk Global buffer out-of-bounds read in DCMTK JPEG Huffman decoding CVE-2026-44038 4.8 MediumOctober 8, 2026
• offis dcmtk Uncontrolled recursion in DCMTK JSON reader allows denial of service CVE-2026-44037 6.8 MediumOctober 8, 2026
• offis dcmtk Uncontrolled recursion in DCMTK xml2dcm allows denial of service CVE-2026-44036 6.8 MediumOctober 8, 2026
• offis dcmtk Uncontrolled recursion in DCMTK DICOMDIR parsing allows denial of service CVE-2026-44035 6.8 MediumOctober 8, 2026
• offis dcmtk Heap out-of-bounds read in DCMTK RLE decodeFrame() CVE-2026-44034 4.8 MediumOctober 8, 2026
• offis dcmtk Uncontrolled recursion in the DCMTK bundled XML parser allows denial of service CVE-2026-44033 6.8 MediumOctober 8, 2026
• offis dcmtk Uncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of service CVE-2026-44031 8.7 HighOctober 8, 2026
• offis dcmtk DCMTK through 3.7.0 Heap Over-read via NumberOfFrames CVE-2026-97059 8.8 HighSeptember 24, 2026
• offis dcmtk OFFIS DCMTK ofxml.cc parseFile heap-based overflow CVE-2026-12805 Fix available 5.3 MediumJune 21, 2026
• offis dcmtk OFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflow CVE-2026-10194 Fix available 5.3 MediumMay 31, 2026
• offis dcmtk OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injection CVE-2026-5663 Fix available 6.9 MediumApril 6, 2026
• offis dcmtk OFFIS DCMTK dcmqrscp dcmqrdbi.cc startMoveRequest null pointer dereference CVE-2025-14841 Fix available 4.8 MediumDecember 18, 2025
• offis dcmtk OFFIS DCMTK dcmdata dcbytstr.cc makeDicomByteString memory corruption CVE-2025-14607 Fix available 5.3 MediumDecember 13, 2025
• offis dcmtk DCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereference CVE-2022-4981 Fix available 4.8 MediumOctober 21, 2025
• offis dcmtk DCMTK dcmqrscp parseQuota stack-based overflow CVE-2020-36855 Fix available 4.8 MediumOctober 21, 2025
• offis dcmtk DCMTK dcm2img diybrpxt.h memory corruption CVE-2025-9732 Fix available 4.8 MediumAugust 31, 2025
• offis dcmtk DCMTK dcmjpls JPEG-LS Decoder memory corruption CVE-2025-2357 Fix available 5.3 MediumMarch 17, 2025
• offis dcmtk, debian linux +1 more A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows... CVE-2025-25475 Fix available 7.5 HighFebruary 18, 2025
• offis dcmtk, debian linux +1 more DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h. CVE-2025-25474 Fix available 6.5 MediumFebruary 18, 2025
• offis dcmtk, debian linux +1 more A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service ... CVE-2025-25472 Fix available 5.3 MediumFebruary 18, 2025
• offis dcmtk An improper array index validation vulnerability exists in the determineMinMax functionality of... CVE-2024-52333 Fix available 8.4 HighJanuary 13, 2025
• offis dcmtk An improper array index validation vulnerability exists in the nowindow functionality of OFFIS... CVE-2024-47796 Fix available 8.4 HighJanuary 13, 2025
• offis dcmtk Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via... CVE-2024-27628 Fix available 8.1 HighJune 28, 2024
• offis dcmtk, debian linux +1 more dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message. CVE-2024-34509 Fix available 5.3 MediumMay 5, 2024
• offis dcmtk, debian linux +1 more dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message. CVE-2024-34508 Fix available 4.3 MediumMay 5, 2024
• offis dcmtk, debian linux +1 more An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage... CVE-2024-28130 Fix available 7.5 HighApril 23, 2024
• offis dcmtk DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object. CVE-2022-43272 Fix available 7.5 HighDecember 2, 2022
• offis dcmtk DCMTK through 3.6.6 does not handle memory free properly. The program malloc a heap memory for... CVE-2021-41687 Fix available 7.5 HighJune 28, 2022
• offis dcmtk DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but... CVE-2021-41688 Fix available 7.5 HighJune 28, 2022
• offis dcmtk DCMTK through 3.6.6 does not handle memory free properly. The malloced memory for storing all... CVE-2021-41690 Fix available 7.5 HighJune 28, 2022
• dcmtk DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the... CVE-2021-41689 Fix available 7.5 HighJune 28, 2022
• offis dcmtk OFFIS DCMTK Path Traversal CVE-2022-2119 Fix available 7.5 HighJune 24, 2022
• offis dcmtk OFFIS DCMTK NULL Pointer Dereference CVE-2022-2121 Fix available 7.5 HighJune 24, 2022
• offis dcmtk OFFIS DCMTK Path Traversal CVE-2022-2120 Fix available 7.5 HighJune 24, 2022
• offis dcmtk, fedoraproject fedora +1 more OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow. The impact is: Possible code... CVE-2019-1010228 Fix available 9.8 CriticalJuly 22, 2019
• offis dcmtk (1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc... CVE-2013-6825 Fix available 7.2 HighJune 10, 2014