TI-2025-08922 CVE-2025-9732 · GHSA-qw76-8prh-rg34
DCMTK dcm2img diybrpxt.h memory corruption
Priority MEDIUM 55
A vulnerability was identified in DCMTK up to 3.6.9.
OFFIS
Records36All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9
Exploited now
OFFIS records in CISA KEVNo OFFIS vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
24 records in Dcmtk · all components
TI-2022-04568 CVE-2022-4981 · GHSA-v454-8grj-83c8
DCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereference
Priority MEDIUM 55
A vulnerability was detected in DCMTK up to 3.6.7.
TI-2020-18990 CVE-2020-36855 · GHSA-7w2m-w84v-g952
DCMTK dcmqrscp parseQuota stack-based overflow
Priority MEDIUM 55
A security vulnerability has been detected in DCMTK up to 3.6.5.
TI-2024-22823 CVE-2024-34508 · GHSA-f5q9-9qmh-w24h
dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.
Priority MEDIUM 53
dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.
TI-2019-16028 CVE-2019-1010228 · GHSA-pqj4-82hx-mp43
Out-of-bounds write in OFFIS.de DCMTK
Priority MEDIUM 53
OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow.
TI-2022-01961 CVE-2022-2120 · GHSA-9hc9-vchg-8p47
OFFIS DCMTK Path Traversal
Priority MEDIUM 49
OFFIS DCMTK's (All versions prior to 3.6.7) service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names.
TI-2022-01960 CVE-2022-2119 · GHSA-5pjf-38m2-65rx
OFFIS DCMTK Path Traversal
Priority MEDIUM 49
OFFIS DCMTK's (All versions prior to 3.6.7) service class provider (SCP) is vulnerable to path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names.
TI-2021-18378 CVE-2021-41690 · GHSA-xqr6-h56f-8r2j
DCMTK through 3.6.6 does not handle memory free properly.
Priority MEDIUM 43
DCMTK through 3.6.6 does not handle memory free properly.
TI-2021-18377 CVE-2021-41689 · GHSA-558h-5pv9-xxg9
DCMTK through 3.6.6 does not handle string copy properly.
Priority MEDIUM 43
DCMTK through 3.6.6 does not handle string copy properly.
TI-2022-21117 CVE-2022-43272 · GHSA-h5pv-v4mg-79m7
DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object.
Priority MEDIUM 42
DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object.
TI-2026-04969 CVE-2026-5663 · GHSA-c42x-qh72-7h87
OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injection
Priority MEDIUM 40
A security flaw has been discovered in OFFIS DCMTK up to 3.7.0.
TI-2024-35005 CVE-2024-52333 · GHSA-89c7-pc4g-j258
Memory corruption in OFFIS DCMTK
Priority LOW 39
An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8.
TI-2024-32066 CVE-2024-47796 · GHSA-4796-5527-wm9m
Memory corruption in OFFIS DCMTK
Priority LOW 39
An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8.
TI-2024-18330 CVE-2024-27628 · GHSA-4vfx-5jf7-gfhv
Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary…
Priority LOW 39
Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component.
TI-2021-18376 CVE-2021-41688 · GHSA-fwff-cx6h-wxmq
DCMTK through 3.6.6 does not handle memory free properly.
Priority LOW 37
DCMTK through 3.6.6 does not handle memory free properly.
TI-2021-18375 CVE-2021-41687 · GHSA-342m-fmj9-855c
DCMTK through 3.6.6 does not handle memory free properly.
Priority LOW 37
DCMTK through 3.6.6 does not handle memory free properly.
TI-2024-18708 CVE-2024-28130 · GHSA-29f8-5v89-7j3x
Incorrect type conversion in OFFIS DCMTK
Priority LOW 36
An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8.
TI-2022-01962 CVE-2022-2121 · GHSA-jrq9-r9fx-4557
OFFIS DCMTK NULL Pointer Dereference
Priority LOW 36
OFFIS DCMTK's (All versions prior to 3.6.7) has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition.
TI-2025-19020 CVE-2025-25475 · GHSA-rqvx-2c23-x225
A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV…
Priority LOW 34
A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DICOM file.
TI-2013-05614 CVE-2013-6825 · GHSA-9xf4-22r3-7ccc
(1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4)…
Priority LOW 32
(1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc/wlmactmg.cc, (5) dcmprscp.cc and (6) dcmpsrcv.cc in dcmpstat/apps/, (7) dcmpstat/tests/msgserv.cc, and (8) dcmqrdb/apps/dcmq…
TI-2025-19019 CVE-2025-25474 · GHSA-mpgh-fjjh-gjv4
DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h.
Priority LOW 29
DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h.
TI-2024-22824 CVE-2024-34509 · GHSA-5pq7-gc86-75cp
dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.
Priority LOW 25
dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.
TI-2025-19017 CVE-2025-25472 · GHSA-m4q4-fgq6-522f
A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of…
Priority LOW 24
A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file.
TI-2025-02072 CVE-2025-2357 · GHSA-vwr6-5rc9-p4cw
DCMTK dcmjpls JPEG-LS Decoder memory corruption
Priority LOW 24
A vulnerability was found in DCMTK 3.6.9.