📄 DCMTK 3.7.0 Unbounded Value Multiplicity Allocation

A proof of concept for an unbounded value multiplicity allocation vulnerability in DCMTK version 3.7.0. The vulnerability occurs when textual DICOM values are parsed into typed numeric arrays without validating the computed Value Multiplicity. An attacker can supply a crafted textual DICOM dump o...