What’s Vulnerable › Products
OFFIS DCMTK vulnerabilities
36 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 22 published in the last 12 months.
Check whether your OFFIS DCMTK version is affected
Latest OFFIS DCMTK vulnerabilities
- CVE-2026-44038 — Global buffer out-of-bounds read in DCMTK JPEG Huffman decoding (CVSS 4.4)
- CVE-2026-44037 — Uncontrolled recursion in DCMTK JSON reader allows denial of service (CVSS 5.5)
- CVE-2026-44036 — Uncontrolled recursion in DCMTK xml2dcm allows denial of service (CVSS 5.5)
- CVE-2026-44035 — Uncontrolled recursion in DCMTK DICOMDIR parsing allows denial of service (CVSS 5.5)
- CVE-2026-44034 — Heap out-of-bounds read in DCMTK RLE decodeFrame() (CVSS 4.4)
- CVE-2026-44033 — Uncontrolled recursion in the DCMTK bundled XML parser allows denial of service (CVSS 5.5)
- CVE-2026-44031 — Uncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of service (CVSS 7.5)
- CVE-2026-97059 — DCMTK through 3.7.0 Heap Over-read via NumberOfFrames (CVSS 8.2)
- CVE-2026-12805 — OFFIS DCMTK ofxml.cc parseFile heap-based overflow (CVSS 6.3)
- CVE-2026-10194 — OFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflow (CVSS 6.3)
- CVE-2026-5663 — OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injection (CVSS 9.8)
- CVE-2025-14841 — OFFIS DCMTK dcmqrscp dcmqrdbi.cc startMoveRequest null pointer dereference (CVSS 3.3)
- CVE-2025-14607 — OFFIS DCMTK dcmdata dcbytstr.cc makeDicomByteString memory corruption (CVSS 6.3)
- CVE-2022-4981 — DCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereference (CVSS 5.5)
- CVE-2020-36855 — DCMTK dcmqrscp parseQuota stack-based overflow (CVSS 5.5)
- CVE-2025-9732 — DCMTK dcm2img diybrpxt.h memory corruption (CVSS 7.8)
- CVE-2025-2357 — DCMTK dcmjpls JPEG-LS Decoder memory corruption (CVSS 6.3)
- CVE-2025-25475 — (CVSS 7.5)
- CVE-2025-25474 — (CVSS 6.5)
- CVE-2025-25472 — (CVSS 5.3)
- CVE-2024-52333 — (CVSS 7.8)
- CVE-2024-47796 — (CVSS 7.8)
- CVE-2024-27628 — (CVSS 8.1)
- CVE-2024-34509 — (CVSS 5.3)
- CVE-2024-34508 — (CVSS 4.3)