CVE-2024-27628

DCMTK v3.6.8 has a buffer overflow vulnerability in the EctEnhancedCT method that could allow arbitrary code execution. Connected advisories indicate this is fixed by updating to DCMTK 3.6.9 (e.g., openSUSE openSUSE-SU-2025:0053-1 and Fedora 6043620E036C) across affected distributions.

CVE-2024-52333

CVE-2024-52333 affects OFFIS DCMTK 3.6.8, with an out-of-bounds write caused by improper array index validation in the determineMinMax functionality. A specially crafted DICOM file can trigger this vulnerability. The issue is documented across multiple advisories (notably openSUSE/SUSE patching t...

CVE-2024-47796

CVE-2024-47796 is an out-of-bounds write in OFFIS DCMTK 3.6.8’s nowindow functionality caused by improper array index validation when parsing a crafted DICOM file. A malicious file can trigger this vulnerability, with local attack vector and high impact on confidentiality, integrity, and availabi...