CVE-2026-44031

Uncontrolled recursion in DcmSequenceOfItems::read and DcmItem::read in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of service stack exhaustion and process crash via a DICOM dataset containing deeply nested sequences SQ elements. The datase...

CVE-2026-44031

The dcmdata library in OFFIS DCMTK 3.7.0 is vulnerable to uncontrolled recursion within the DcmSequenceOfItems::read() and DcmItem::read() functions. A remote, unauthenticated attacker can trigger a denial of service (stack exhaustion and process crash) by providing a DICOM dataset with deeply ne...