CVE-2026-23009-DICOM-Network-Image-Injection-Without-Authentication

CVE-2026-23009 – 認証なしのDICOMネットワーク画像注入 プログラムコード Python pydicom dicomserversim.py - DICOM C-STORE SCP with no AE title check from pynetdicom import AE, evt, AllStoragePresentationContexts def handlestoreevent: ds = event.dataset No authentication, accepts any image from any remote...

CVE-2026-44031

Uncontrolled recursion in DcmSequenceOfItems::read and DcmItem::read in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of service stack exhaustion and process crash via a DICOM dataset containing deeply nested sequences SQ elements. The datase...

CVE-2026-44031

Uncontrolled recursion in DcmSequenceOfItems::read and DcmItem::read in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of service stack exhaustion and process crash via a DICOM dataset containing deeply nested sequences SQ elements. The datase...

EUVD-2026-94935

Uncontrolled recursion in DcmSequenceOfItems::read and DcmItem::read in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of service stack exhaustion and process crash via a DICOM dataset containing deeply nested sequences SQ elements. The datase...

CVE-2026-56445

A flaw was found in pynetdicom. The qrscp application's C-STORE handler improperly sanitizes attacker-supplied Digital Imaging and Communications in Medicine DICOM datasets. This allows a remote attacker to write files to arbitrary paths on the system, which could lead to arbitrary code execution...

CVE-2026-56445: Improper Limitation of a Pathname to a Restricted Directory

The qrscp application's C-STORE handler uses a specific instance from attacker-supplied DICOM datasets directly in os.path.join without sanitization, allowing file writes to arbitrary paths...

DCMTK storescp DICOM storage (C-STORE) SCP Remote Stack Buffer Overflow

Summary DCMTK is a collection of libraries and applications implementing large parts the DICOM standard. It includes software for examining, constructing and converting DICOM image files, handling offline media, sending and receiving images over a network connection, as well as demonstrative imag...

DCMTK storescp DICOM storage (C-STORE) SCP Remote Stack Buffer Overflow

!/usr/bin/env python -- coding: utf8 -- DCMTK storescp DICOM storage C-STORE SCP Remote Stack Buffer Overflow Vendor: OFFIS e. V. Product web page: http://www.dcmtk.org Affected version: = 3.6.0 Not affected: DCMTK-3.6.120160216 - https://github.com/commontk/DCMTK/commit/1b6bb76...