Read the docs

OFFIS

Records36All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

OFFIS records in CISA KEV

No OFFIS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Dcmtk 24 records MEDIUM

Records

36 records

TI-2025-08922 CVE-2025-9732 · GHSA-qw76-8prh-rg34

DCMTK dcm2img diybrpxt.h memory corruption

Priority MEDIUM 55

A vulnerability was identified in DCMTK up to 3.6.9.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00183 Published 2025-08-31 No fix listed CWE-119
TI-2020-18990 CVE-2020-36855 · GHSA-7w2m-w84v-g952

DCMTK dcmqrscp parseQuota stack-based overflow

Priority MEDIUM 55

A security vulnerability has been detected in DCMTK up to 3.6.5.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00247 Published 2025-10-21 Fixed in 3.6.6 CWE-119
TI-2019-16028 CVE-2019-1010228 · GHSA-pqj4-82hx-mp43

Out-of-bounds write in OFFIS.de DCMTK

Priority MEDIUM 53

OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07774 Published 2019-07-22 No fix listed CWE-787
TI-2022-01961 CVE-2022-2120 · GHSA-9hc9-vchg-8p47

OFFIS DCMTK Path Traversal

Priority MEDIUM 49

OFFIS DCMTK's (All versions prior to 3.6.7) service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03368 Published 2022-06-24 Fixed in 3.6.7 CWE-23
TI-2022-01960 CVE-2022-2119 · GHSA-5pjf-38m2-65rx

OFFIS DCMTK Path Traversal

Priority MEDIUM 49

OFFIS DCMTK's (All versions prior to 3.6.7) service class provider (SCP) is vulnerable to path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03368 Published 2022-06-24 Fixed in 3.6.7 CWE-22
TI-2026-63934 CVE-2026-97059 · GHSA-4pm7-3ffj-xfrq

DCMTK through 3.7.0 Heap Over-read via NumberOfFrames

Priority MEDIUM 44

DCMTK through 3.7.0 contains a heap over-read vulnerability in ConcatenationLoader that copies pixel data frames without validating the PixelData buffer length against the declared NumberOfFrames.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00343 Published 2026-09-24 No fix listed CWE-125
TI-2024-35005 CVE-2024-52333 · GHSA-89c7-pc4g-j258

Memory corruption in OFFIS DCMTK

Priority LOW 39

An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00623 Published 2025-01-13 No fix listed CWE-119
TI-2024-32066 CVE-2024-47796 · GHSA-4796-5527-wm9m

Memory corruption in OFFIS DCMTK

Priority LOW 39

An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00623 Published 2025-01-13 No fix listed CWE-119
TI-2026-69426 CVE-2026-44031 · GHSA-hxvw-37gr-vg44

DCMTK DICOM parser uncontrolled recursion enables unauthenticated remote DoS

Priority LOW 38

Uncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read() in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of service (stack exhaustion and process cr…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00391 Published 2026-10-08 No fix listed CWE-674
TI-2024-18708 CVE-2024-28130 · GHSA-29f8-5v89-7j3x

Incorrect type conversion in OFFIS DCMTK

Priority LOW 36

An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01692 Published 2024-04-23 No fix listed CWE-704
TI-2022-01962 CVE-2022-2121 · GHSA-jrq9-r9fx-4557

OFFIS DCMTK NULL Pointer Dereference

Priority LOW 36

OFFIS DCMTK's (All versions prior to 3.6.7) has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00777 Published 2022-06-24 Fixed in 3.6.7 CWE-476
TI-2013-05614 CVE-2013-6825 · GHSA-9xf4-22r3-7ccc

(1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4)…

Priority LOW 32

(1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc/wlmactmg.cc, (5) dcmprscp.cc and (6) dcmpsrcv.cc in dcmpstat/apps/, (7) dcmpstat/tests/msgserv.cc, and (8) dcmqrdb/apps/dcmq…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00489 Published 2014-06-10 No fix listed CWE-264
TI-2026-69431 CVE-2026-44037 · GHSA-w8m4-mhcj-8r75

DCMTK JSON reader uncontrolled recursion allows denial of service

Priority LOW 29

Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denia…

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00105 Published 2026-10-08 No fix listed CWE-674
Load more
Open these records in search →