CVE-2025-25472

CVE-2025-25472 concerns DCMTK. Connected sources confirm a buffer overflow in DCMTK git master v3.6.9+ DEV that allows an attacker to cause a Denial of Service via a crafted DCM file. The vulnerability is described across multiple advisories as affecting DCMTK and is referenced in Debian LTS/DLA-...

CVE-2024-34509

DCMTK component dcmdata in DCMTK before 3.6.9 is affected by a segmentation fault triggered by an invalid DIMSE message (CVE-2024-34509). Public advisories confirm the issue and group it with related DCMTK DIMSE fault CVEs. The fixed version is DCMTK 3.6.9; remediation is to upgrade to or apply p...

CVE-2020-36855

CVE-2020-36855 affects DCMTK up to 3.6.5, specifically the dcmqrscp component and its parseQuota function. The issue is a stack-based buffer overflow caused by manipulated StorageQuota, requiring local access. The vulnerability has public exploits and is fixed by upgrading to DCMTK 3.6.6 (patch i...

CVE-2022-4981

CVE-2022-4981 affects DCMTK up to 3.6.7, with the vulnerable element in the dcmqrscp component: DcmQueryRetrieveConfig::readPeerList (file /dcmqrcnf.cc). The issue causes a null pointer dereference and is exploitable via local access. Public exploit information exists. The recommended fix is upgr...