CVE-2025-25472

A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service DoS via a crafted DCM file...

CVE-2025-25474

DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h...

CVE-2025-25475

A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service DoS via a crafted DICOM file...

CVE-2025-25475

A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service DoS via a crafted DICOM file...

CVE-2025-25474

DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h...

CVE-2025-25474

DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h...

CVE-2025-25472

CVE-2025-25472 concerns DCMTK. Connected sources confirm a buffer overflow in DCMTK git master v3.6.9+ DEV that allows an attacker to cause a Denial of Service via a crafted DCM file. The vulnerability is described across multiple advisories as affecting DCMTK and is referenced in Debian LTS/DLA-...

[SECURITY] [DLA 4038-2] dcmtk regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4038-2 [email protected] https://www.debian.org/lts/security/ Adrian Bunk February 12, 2025 https://wiki.debian.org/LTS -...

DLA-4038-2 dcmtk - regression update

Bulletin has no description...

openSUSE 15 Security Update : dcmtk (openSUSE-SU-2025:0053-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0053-1 advisory. Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes Security issues fixed: - CVE-2024-27628: Fixed buffer overflow via the...

OPENSUSE-SU-2025:0053-1 Security update for dcmtk

This update for dcmtk fixes the following issues: Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes Security issues fixed: - CVE-2024-27628: Fixed buffer overflow via the EctEnhancedCT method boo1227235 - CVE-2024-34508: Fixed a segmentation fault via an invalid DIMSE message...

Security update for dcmtk (important)

openSUSE Security Update: Security update for dcmtk Announcement ID: openSUSE-SU-2025:0053-1 Rating: important References: 1223925 1223943 1227235 1235810 1235811 Cross-References: CVE-2024-27628 CVE-2024-34508 CVE-2024-34509 CVE-2024-47796 CVE-2024-52333 Affected Products: openSUSE Backports...

CVE-2024-52333

An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2024-47796

An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

Debian: Security Advisory (DLA-4038-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4038-1] dcmtk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4038-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk January 31, 2025 https://wiki.debian.org/LTS -...

Debian dla-4038 : dcmtk - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4038 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4038-2 [email protected] https://www.debian.org/lts/security/...

DLA-4038-1 dcmtk - security update

Bulletin has no description...

Advisory ROSA-SA-2025-2643

software: dcmtk 3.6.6 OS: ROSA-CHROME packageevrstring: dcmtk-3.6.6 CVE-ID: CVE-2022-2119 BDU-ID: 2023-03840 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the DICOM DCMTK format library is related to flaws in the directory path name restriction. Exploitation of the vulnerability allows an...

Mageia: Security Advisory (MGASA-2025-0017)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...