Priority LOW 21
A global out-of-bounds read in the Huffman decoder of the bundled IJG JPEG libraries (dcmjpeg/libijg8, libijg12 and libijg16) of OFFIS DCMTK 3.7.0 allows an attacker to read memory beyond the extend_test[] and extend_off…
CVSS 4.0MEDIUM 4.8· Local · No auth · User interaction · EPSS 0.00107 · Published 2026-10-08 · No fix listed CWE-125
Priority LOW 29
Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denia…
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00105 · Published 2026-10-08 · No fix listed CWE-674
Priority LOW 29
Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause…
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00105 · Published 2026-10-08 · No fix listed CWE-674
Priority LOW 29
Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOMDIR fil…
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00105 · Published 2026-10-08 · No fix listed CWE-674
Priority LOW 21
A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame() in dcmdata/libsrc/dcrleccd.cc of OFFIS DCMTK 3.7.0 allows an attacker to read up to 63 bytes of adjacent heap memory, or cause a crash, via a crafted R…
CVSS 4.0MEDIUM 4.8· Local · No auth · User interaction · EPSS 0.00107 · Published 2026-10-08 · No fix listed CWE-125
Priority LOW 29
Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc/ofxml.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion an…
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00105 · Published 2026-10-08 · No fix listed CWE-674
Priority LOW 38
Uncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read() in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of service (stack exhaustion and process cr…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00391 · Published 2026-10-08 · No fix listed CWE-674
Priority MEDIUM 44
DCMTK through 3.7.0 contains a heap over-read vulnerability in ConcatenationLoader that copies pixel data frames without validating the PixelData buffer length against the declared NumberOfFrames.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00343 · Published 2026-09-24 · No fix listed CWE-125
Priority MEDIUM 57
A flaw has been found in OFFIS DCMTK up to 3.7.0.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00468 · Published 2026-06-21 · No fix listed CWE-119
Priority LOW 24
A weakness has been identified in OFFIS DCMTK 3.7.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00247 · Published 2026-05-31 · No fix listed CWE-119
Priority MEDIUM 40
A security flaw has been discovered in OFFIS DCMTK up to 3.7.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.01965 · Published 2026-04-06 · No fix listed CWE-77
Priority LOW 21
A flaw has been found in OFFIS DCMTK up to 3.6.9.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00135 · Published 2025-12-18 · Fixed in 3.7.0 CWE-404
Priority LOW 30
A vulnerability was detected in OFFIS DCMTK up to 3.6.9.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00274 · Published 2025-12-13 · Fixed in 3.7.0 CWE-119
Priority MEDIUM 55
A vulnerability was detected in DCMTK up to 3.6.7.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00275 · Published 2025-10-21 · Fixed in 3.6.8 CWE-404
Priority MEDIUM 55
A security vulnerability has been detected in DCMTK up to 3.6.5.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00247 · Published 2025-10-21 · Fixed in 3.6.6 CWE-119
Priority MEDIUM 55
A vulnerability was identified in DCMTK up to 3.6.9.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00183 · Published 2025-08-31 · No fix listed CWE-119
Priority LOW 24
A vulnerability was found in DCMTK 3.6.9.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00444 · Published 2025-03-17 · Fix deferred CWE-119
Priority LOW 34
A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DICOM file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00594 · Published 2025-02-18 · No fix listed CWE-476
Priority LOW 29
DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00352 · Published 2025-02-18 · No fix listed CWE-120
Priority LOW 24
A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00363 · Published 2025-02-18 · No fix listed CWE-120
Priority LOW 39
An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00623 · Published 2025-01-13 · No fix listed CWE-119
Priority LOW 39
An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00623 · Published 2025-01-13 · No fix listed CWE-119
Priority LOW 39
Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00735 · Published 2024-06-28 · No fix listed CWE-120
Priority LOW 25
dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00748 · Published 2024-05-05 · No fix listed
Priority MEDIUM 53
dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00687 · Published 2024-05-05 · No fix listed CWE-476
Load more
THREATIST.IORead the docs