CVE-2026-44036

Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet and DcmXMLParseHelper::parseSequence in the XML-to-DICOM converter dcmdata/libdcxml/xml2dcm.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted XML file with...

CVE-2026-44036

The OFFIS DCMTK 3.7.0 library is vulnerable to a denial of service (DoS) due to uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() within the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc ). An attacker can trigger a stack exhausti...