gdcm-security-poc

GDCM findings 1-6: reproduction package Six parser/codec defects in GDCM, reproduced on v3.2.6 as sanitizer failures or bounded propagation checks. Each automated trigger has a near-valid control that does not produce the vulnerable signal. Finding 1 also includes an instrumented control-flow...

[SECURITY] Fedora 45 Update: gdcm-3.0.24-24.fc45

Grassroots DiCoM GDCM is a C++ library for DICOM medical files. It supports ACR-NEMA version 1 and 2 huffman compression is not supported, RAW, JPEG, JPEG 2000, JPEG-LS, RLE and deflated transfer syntax. It comes with a super fast scanner implementation to quickly scan hundreds of DICOM files. It...

[SECURITY] Fedora 45 Update: dicomanonymizer-1-0.22.20210920gitf076264.fc45

A multi-threaded anonymizer for DICOM files implementing most of DICOM PS 3.15 AnnexE. Entries such as uid entries are replaced with hash values. This ensur es that partial runs of a studies DICOM files can be merged afterwards. This project is written in C++ using the gdcm library and multiple...

...[ More ]

GDCM Grassroots DICOM is an open-source C++ library for reading, writing, and processing DICOM Digital Imaging and Communications in Medicine medical imaging files. The JPEG2000 image codec in GDCM, used for decoding JPEG2000-compressed DICOM pixel data, is vulnerable to an integer overflow that...

...[ More ]

GDCM Grassroots DICOM is an open-source C++ library for reading, writing, and processing DICOM Digital Imaging and Communications in Medicine medical imaging files. The gdcmstream command-line tool, used for stream-based reading and writing of DICOM images, is vulnerable to an integer overflow th...

...[ More ]

GDCM Grassroots DICOM is an open-source C++ library for reading, writing, and processing DICOM Digital Imaging and Communications in Medicine medical imaging files. The gdcmFilenameGenerator component, used by the gdcmraw command-line tool to generate output filenames for split fragments, is...

...[ More ]

GDCM Grassroots DICOM is an open-source C++ library for reading, writing, and processing DICOM Digital Imaging and Communications in Medicine medical imaging files. GDCM's command-line tool gdcmxml, which converts between XML and DICOM file formats, is vulnerable to a stack-based buffer overflow ...

...[ More ]

GDCM Grassroots DICOM is an open-source C++ library for reading, writing, and processing DICOM Digital Imaging and Communications in Medicine medical imaging files. The library function gdcm::System::EncodeBytes, defined in Source/Common/gdcmSystem.cxx, is vulnerable to a stack-based buffer...

Debian dla-4652 : gdcm-doc - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4652 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4652-1 [email protected]...

CVE-2026-3650: Missing Release of Memory after Effective Lifetime

A memory leak exists in the Grassroots DICOM library GDCM. The bug occurs when parsing malformed DICOM files with non-standard VR types in file meta information. The vulnerability leads to vast memory allocations and resource depletion, triggering a denial-of-service condition. A maliciously...

openSUSE 16 Security Update : orthanc, gdcm, orthanc-authorization, orthanc-dicomweb, orthanc-gdcm, orthanc-indexer, orthanc-mysql, orthanc-neuro, orthanc-postgresql, orthanc-python, orthanc-stl, orthanc-tcia, orthanc-wsi, python-pyorthanc (openSUSE-SU-2026:20193-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20193-1 advisory. Changes in orthanc: - dcmtk 370 breaks TW build - switch to lua 5.4 - patch out boost component system from framework - version 1.12.10 ' long...

OPENSUSE-SU-2026:20193-1 Security update for orthanc, gdcm, orthanc-authorization, orthanc-dicomweb, orthanc-gdcm, orthanc-indexer, orthanc-mysql, orthanc-neuro, orthanc-postgresql, orthanc-python, orthanc-stl, orthanc-tcia, orthanc-wsi, python-pyorthanc

This update for orthanc, gdcm, orthanc-authorization, orthanc-dicomweb, orthanc-gdcm, orthanc-indexer, orthanc-mysql, orthanc-neuro, orthanc-postgresql, orthanc-python, orthanc-stl, orthanc-tcia, orthanc-wsi, python-pyorthanc fixes the following issues: Changes in orthanc: - dcmtk 370 breaks TW...

CVE-2025-11266: Out-of-bounds Write

An out-of-bounds write vulnerability exists in the Grassroots DICOM library GDCM. The issue is triggered during parsing of a malformed DICOM file containing encapsulated PixelData fragments compressed image data stored as multiple fragments. This vulnerability leads to a segmentation fault caused...

orthanc-gdcm-1.7-1.1 on GA media (moderate)

orthanc-gdcm-1.7-1.1 on GA media Announcement ID: openSUSE-SU-2025:15546-1 Rating: moderate Cross-References: CVE-2024-22373 CVE-2024-22391 CVE-2024-25569 CVSS scores: CVE-2024-22373 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2024-22391 SUSE : 7.7...

OPENSUSE-SU-2025:15546-1 orthanc-gdcm-1.7-1.1 on GA media

These are all security issues fixed in the orthanc-gdcm-1.7-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora: Security Advisory (FEDORA-2024-c5909efa5c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 42 Update: gdcm-3.0.24-8.fc42

Grassroots DiCoM GDCM is a C++ library for DICOM medical files. It supports ACR-NEMA version 1 and 2 huffman compression is not supported, RAW, JPEG, JPEG 2000, JPEG-LS, RLE and deflated transfer syntax. It comes with a super fast scanner implementation to quickly scan hundreds of DICOM files. It...

openSUSE Security Advisory (openSUSE-SU-2024:0168-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : gdcm (2024-c5909efa5c)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c5909efa5c advisory. Automatic update for gdcm-3.0.23-5.fc41. Changelog Fri Apr 26 2024 Sandro - 3.0.23-5 - Apply security patches - Fix TALOS-2024-1924, CVE-2024-22391...

Security update for gdcm (important)

openSUSE Security Update: Security update for gdcm Announcement ID: openSUSE-SU-2024:0168-1 Rating: important References: 1223398 Cross-References: CVE-2024-22373 CVSS scores: CVE-2024-22373 SUSE: 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP6 An...