CVE-2026-44035

Uncontrolled recursion in DcmDicomDir::moveRecordToTree in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted DICOMDIR file with a deeply chained sequence of directory records linked through the Offset o...

CVE-2026-44035

The OFFIS DCMTK 3.7.0 software is vulnerable to a denial of service (stack exhaustion and process crash) due to uncontrolled recursion in the DcmDicomDir::moveRecordToTree() function located in dcmdata/libsrc/dcdicdir.cc. An attacker can trigger this by providing a crafted DICOMDIR file containin...

EUVD-2026-94938

Uncontrolled recursion in DcmDicomDir::moveRecordToTree in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted DICOMDIR file with a deeply chained sequence of directory records linked through the Offset o...