DC
Product
DCMTK
36
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 4High 13Medium 17Low 1
Watch
Add DCMTK to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-5663 | 9.8 | Apr 6 | OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injection Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +2 more |
| CVE-2022-2120 | 9.8 | Jun 24 | OFFIS DCMTK's (All versions prior to 3.6.7) service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories… Affected: before 3.6.7 |
| CVE-2022-2119 | 9.8 | Jun 24 | OFFIS DCMTK's (All versions prior to 3.6.7) service class provider (SCP) is vulnerable to path traversal, allowing an attacker to write DICOM files into arbitrary directories… Affected: before 3.6.7 |
| CVE-2019-1010228 | 9.8 | Jul 22 | OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow Affected: through 3.6.3 |
| CVE-2026-97059 | 8.2 | Sep 24 | DCMTK through 3.7.0 Heap Over-read via NumberOfFrames Affected: through 3.7.0 |
| CVE-2024-27628 | 8.1 | Jun 28 | Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component Affected: 3.6.8 |
| CVE-2025-9732 | 7.8 | Aug 31 | DCMTK dcm2img diybrpxt.h memory corruption Affected: through 3.6.9 |
| CVE-2024-52333 | 7.8 | Jan 13 | An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8 Affected: 3.6.8 |
| CVE-2024-47796 | 7.8 | Jan 13 | An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8 Affected: 3.6.8 |
| CVE-2026-44031 | 7.5 | Oct 8 | Uncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of service Affected: 3.7.0 |
| CVE-2025-25475 | 7.5 | Feb 18 | A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DICOM file Affected: 3.6.9 |
| CVE-2024-28130 | 7.5 | Apr 23 | An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8 Affected: 3.6.8 |
| CVE-2022-43272 | 7.5 | Dec 2 | DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object Affected: 3.6.7 |
| CVE-2021-41690 | 7.5 | Jun 28 | DCMTK through 3.6.6 does not handle memory free properly Affected: through 3.6.6 |
| CVE-2021-41689 | 7.5 | Jun 28 | DCMTK through 3.6.6 does not handle string copy properly Affected: through 3.6.6 |
| CVE-2021-41688 | 7.5 | Jun 28 | DCMTK through 3.6.6 does not handle memory free properly Affected: through 3.6.6 |
| CVE-2021-41687 | 7.5 | Jun 28 | DCMTK through 3.6.6 does not handle memory free properly Affected: through 3.6.6 |
| CVE-2025-25474 | 6.5 | Feb 18 | DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h Affected: 3.6.9 |
| CVE-2022-2121 | 6.5 | Jun 24 | OFFIS DCMTK's (All versions prior to 3.6.7) has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition Affected: before 3.6.7 |
| CVE-2026-12805 | 6.3 | Jun 21 | OFFIS DCMTK ofxml.cc parseFile heap-based overflow Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +2 more |
| CVE-2026-10194 | 6.3 | May 31 | OFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflow Affected: 3.7.0 |
| CVE-2025-14607 | 6.3 | Dec 13 | OFFIS DCMTK dcmdata dcbytstr.cc makeDicomByteString memory corruption Affected: 3.6.0; 3.6.1; 3.6.2; 3.6.3; 3.6.4; 3.6.5; +4 more |
| CVE-2025-2357 | 6.3 | Mar 17 | A vulnerability was found in DCMTK 3.6.9 Affected: 3.6.9 |
| CVE-2026-44037 | 5.5 | Oct 8 | Uncontrolled recursion in DCMTK JSON reader allows denial of service Affected: 3.7.0 |
| CVE-2026-44036 | 5.5 | Oct 8 | Uncontrolled recursion in DCMTK xml2dcm allows denial of service Affected: 3.7.0 |
| CVE-2026-44035 | 5.5 | Oct 8 | Uncontrolled recursion in DCMTK DICOMDIR parsing allows denial of service Affected: 3.7.0 |
| CVE-2026-44033 | 5.5 | Oct 8 | Uncontrolled recursion in the DCMTK bundled XML parser allows denial of service Affected: 3.7.0 |
| CVE-2022-4981 | 5.5 | Oct 21 | DCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereference Affected: before 3.6.8 |
| CVE-2020-36855 | 5.5 | Oct 21 | DCMTK dcmqrscp parseQuota stack-based overflow Affected: before 3.6.6 |
| CVE-2025-25472 | 5.3 | Feb 18 | A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file Affected: 3.6.9 |
| CVE-2024-34509 | 5.3 | May 5 | dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message Affected: before 3.6.9 |
| CVE-2026-44038 | 4.4 | Oct 8 | Global buffer out-of-bounds read in DCMTK JPEG Huffman decoding Affected: 3.7.0 |
| CVE-2026-44034 | 4.4 | Oct 8 | Heap out-of-bounds read in DCMTK RLE decodeFrame() Affected: 3.7.0 |
| CVE-2024-34508 | 4.3 | May 5 | dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message Affected: before 3.6.9 |
| CVE-2025-14841 | 3.3 | Dec 18 | OFFIS DCMTK dcmqrscp dcmqrdbi.cc startMoveRequest null pointer dereference Affected: 3.6.0; 3.6.1; 3.6.2; 3.6.3; 3.6.4; 3.6.5; +4 more |
| CVE-2013-6825 | – | Jun 10 | (1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc/wlmactmg.cc, (5) dcmprscp.cc and (6) dcmpsrcv.cc in dcmpstat/apps/, (7)… Affected: through 3.6.1; 3.5.1; 3.5.2; 3.5.2a; 3.5.3; 3.5.4; +1 more |
Showing 36
