EUVD-2022-34405

Malicious code in bioql PyPI...

EUVD-2024-25277

Malicious code in bioql PyPI...

EUVD-2024-34834

Malicious code in bioql PyPI...

EUVD-2024-42665

Malicious code in bioql PyPI...

EUVD-2024-46232

Malicious code in bioql PyPI...

EUVD-2025-6677

Malicious code in bioql PyPI...

EUVD-2025-4558

Malicious code in bioql PyPI...

EUVD-2025-4573

Malicious code in bioql PyPI...

EUVD-2025-4574

Malicious code in bioql PyPI...

EUVD-2021-28701

Malicious code in bioql PyPI...

EUVD-2022-34407

Malicious code in bioql PyPI...

dcmtk-3.6.9-4.1 on GA media (moderate)

dcmtk-3.6.9-4.1 on GA media Announcement ID: openSUSE-SU-2025:15504-1 Rating: moderate Cross-References: CVE-2025-9732 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the dcmtk-3.6.9-4.1 packa...

OPENSUSE-SU-2025:15504-1 dcmtk-3.6.9-4.1 on GA media

These are all security issues fixed in the dcmtk-3.6.9-4.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-9732 DCMTK dcm2img diybrpxt.h memory corruption

A vulnerability was identified in DCMTK up to 3.6.9. This affects an unknown function in the library dcmimage/include/dcmtk/dcmimage/diybrpxt.h of the component dcm2img. Such manipulation leads to memory corruption. Local access is required to approach this attack. The name of the patch is...

CVE-2025-9732

Summary of CVE-2025-9732 (DCMTK) : A memory corruption vulnerability exists in DCMTK up to version 3.6.9, triggered by manipulating an unknown function in dcmimage/include/dcmtk/dcmimage/diybrpxt.h within the dcm2img component. The issue requires local access to exploit and is attributed to impro...

Linux Distros Unpatched Vulnerability : CVE-2021-41690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DCMTK through 3.6.6 does not handle memory free properly. The malloced memory for storing all file information are recorded in a global variable LST and are not...

Linux Distros Unpatched Vulnerability : CVE-2021-41689

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would query its database and copy the result even...

Linux Distros Unpatched Vulnerability : CVE-2022-2121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OFFIS DCMTK's All versions prior to 3.6.7 has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service...

Ubuntu: Security Advisory (USN-7010-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7010-2: DCMTK regression

USN-7010-1 fixed vulnerabilities in DCMTK. The update introduced a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Jinsheng Ba discovered that DCMTK incorrectly handled certain requests. If a user or an automated system were tricked into...