CVE-2026-50003

A flaw was found in DCMTK. A malicious or compromised server can exploit a vulnerability in the DCMTK client's bit-preserving C-GET storage mode. This allows the server to write files to arbitrary locations on the client system, potentially leading to system compromise or data corruption...

CVE-2026-50003

A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode write files outside the chosen output directory, using both relative ../ paths and absolute paths...

CVE-2026-50003: Improper Limitation of a Pathname to a Restricted Directory

A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode write files outside the chosen output directory, using both relative ../ paths and absolute paths...