24 matches found
CVE-2025-25474
The DCMTK DICOM toolkit (v3.6.9+ DEV) is vulnerable to a buffer overflow in the /dcmimgle/diinpxt.h component. This vulnerability is caused by copying buffers without properly validating the size of the input data. A remote attacker could exploit this flaw to cause a denial of service or potentia...
CVE-2024-28130
CVE-2024-28130 affects OFFIS DCMTK 3.6.8 (DVPSSoftcopyVOI_PList::createFromImage) with a malformed file enabling arbitrary code execution. Public references in Debian (DCMTK 3.6.5-1+deb11u1 fix), Ubuntu security advisory USN-7010-1, and Fedora dcmtk 3.6.9-2.fc42 indicate multiple distributions ha...
CVE-2021-41687
DCMTK has a memory free issue in versions up to 3.6.6 (CVE-2021-41687) where allocated heap memory during parsing may not be freed on parsing errors, enabling a DoS via crafted requests to dcmqrdb. Public advisories (Ubuntu USN-7010-1, Debian DLA-4038-1, Debian 10/DLA-3847, Mageia MGASA-2024-0251...
CVE-2025-25472
A buffer overflow exists in DCMTK git master v3.6.9+ DEV , allowing an attacker to cause a Denial of Service (DoS) by providing a crafted DCM file . While the specific component is not named for this CVE in the primary description, related vulnerabilities in the same library suggest issues within...
CVE-2022-2120
Offis DCMTK vulnerable: all versions prior to 3.6.7 of the service class user (SCU) in DCMTK allow relative path traversal, enabling writing DICOM files to arbitrary directories and potentially remote code execution. Multiple advisories (Debian DLA-4227, openSUSE/SUSE advisories, Ubuntu USN-5882-...
CVE-2025-25475
A NULL pointer dereference in the /libsrc/dcrleccd.cc component of the DCMTK (v3.6.9+ DEV) DICOM processing library allows attackers to trigger a Denial of Service (DoS) by providing a crafted DICOM file . This vulnerability is present in various distributions, including Debian 11 bullseye (fixed...
CVE-2022-2119
CVE-2022-2119 affects OFFIS DCMTK prior to 3.6.7, specifically the SCP service class. The vulnerability is a path traversal flaw that lets an attacker write DICOM files to arbitrary directories with controlled names, potentially enabling remote code execution. Public notices from Debian and openS...
CVE-2024-27628
The DCMTK DICOM library version 3.6.8 contains a buffer overflow vulnerability within the EctEnhancedCT method component. The root cause is buffer copying without input data validation , which could allow a remote attacker to execute arbitrary code . While specific exploit links are not provided,...
CVE-2021-41688
CVE-2021-41688 affects DCMTK up to version 3.6.6, where improper memory management in DCMTK’s dcmqrdb handling can lead to a double free and a resulting denial of service. The vulnerability is described as: an object is freed while its address remains in use, allowing specific requests to trigger...
CVE-2025-2357
DCMTK 3.6.9 contains a memory-corruption vulnerability in the dcmjpls JPEG-LS Decoder. The issue can be exploited remotely, with exploitation information reported publicly. A patch named 3239a7915 is referenced as fixes for this issue; applying the patch is the advised remediation. The CVE descri...
CVE-2022-2121
CVE-2022-2121 affects OFFIS DCMTK: all versions before 3.6.7 are vulnerable to a NULL pointer dereference when processing DICOM files, which may lead to denial of service. Remediation is to upgrade to DCMTK 3.6.7 or newer; multiple advisories (Debian, Mageia, openSUSE, Astra Linux) note DCMTK upd...
CVE-2022-43272
CVE-2022-43272 affects DCMTK v3.6.7, with a memory leak in the single-process path related to T_ASC_Association (notably in ASC_receiveAssociation and parseUserInfo flows). The issue is a memory leak rather than an explicit remote code execution or crash in the presented docs, and exploitation de...
CVE-2024-34509
The dcmdata component in DCMTK before version 3.6.9 is vulnerable to a segmentation fault triggered by an invalid DIMSE message . Technical analysis indicates that the root cause involves operations exceeding buffer boundaries in memory, which can lead to a denial of service (DoS). Exploitation d...
CVE-2021-41689
DCMTK 3.6.6 and earlier contains a NULL pointer dereference and potential head-based overflow in dcmqrdb due to improper handling of string copy, allowing remote DoS via crafted requests. Public advisories confirm this vulnerability (CVE-2021-41689) and reference multiple vendor patches: Debian f...
CVE-2021-41690
DCMTK (up to 3.6.6) is affected by CVE-2021-41690, which describes improper freeing of memory where malloced file-info structures stored in a global LST are not freed, enabling a potential DoS via memory leak in dcmqrdb. Connected advisories (Debian, Debian LTS, Mageia, Ubuntu USN, Fedora Nessus,...
CVE-2024-34508
The dcmnet component in the DCMTK library (versions before 3.6.9 ) is vulnerable to a segmentation fault triggered by an invalid DIMSE message . This memory safety issue can lead to denial of service , and potentially allow an attacker to gain access to confidential data or compromise data integr...
CVE-2024-52333
CVE-2024-52333 affects OFFIS DCMTK 3.6.8, with an out-of-bounds write caused by improper array index validation in the determineMinMax functionality. A specially crafted DICOM file can trigger this vulnerability. The issue is documented across multiple advisories (notably openSUSE/SUSE patching t...
CVE-2024-47796
CVE-2024-47796 is an out-of-bounds write in OFFIS DCMTK 3.6.8’s nowindow functionality caused by improper array index validation when parsing a crafted DICOM file. A malicious file can trigger this vulnerability, with local attack vector and high impact on confidentiality, integrity, and availabi...
CVE-2013-6825
CVE-2013-6825 affects DCMTK 3.6.1 and earlier, with multiple components (movescu, storescp, scp, wlmactmg, dcmprscp, dcmpsrcv, dcmpstat tests, and dcmqrscp) failing to check the return value of the setuid call. This permits local privilege escalation by spawning a large number of processes. Conne...
CVE-2025-9732
Summary of CVE-2025-9732 (DCMTK) : A memory corruption vulnerability exists in DCMTK up to version 3.6.9, triggered by manipulating an unknown function in dcmimage/include/dcmtk/dcmimage/diybrpxt.h within the dcm2img component. The issue requires local access to exploit and is attributed to impro...
CVE-2026-5663
OFFIS DCMTK up to 3.7.0 contains a vulnerability in the storescp component (dcmnet/apps/storescp.cc: executeOnReception/executeOnEndOfStudy) that allows os command injection through manipulation. Remote exploitation is possible. A patch (edbb085e45788dccaf0e64d71534cfca925784b8) is available and ...
CVE-2020-36855
CVE-2020-36855 affects DCMTK up to 3.6.5, specifically the dcmqrscp component and its parseQuota function. The issue is a stack-based buffer overflow caused by manipulated StorageQuota, requiring local access. The vulnerability has public exploits and is fixed by upgrading to DCMTK 3.6.6 (patch i...
CVE-2022-4981
CVE-2022-4981 affects DCMTK up to 3.6.7, with the vulnerable element in the dcmqrscp component: DcmQueryRetrieveConfig::readPeerList (file /dcmqrcnf.cc). The issue causes a null pointer dereference and is exploitable via local access. Public exploit information exists. The recommended fix is upgr...