DC
Product
DCMTK
by OFFIS · last CVE Oct 8, 2026
36
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 4High 13Medium 17Low 1
Watch

Add DCMTK to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-5663
9.8
2%
Apr 6
OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injection
Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +2 more
CVE-2022-2120
9.8
3%
Jun 24
OFFIS DCMTK's (All versions prior to 3.6.7) service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories…
Affected: before 3.6.7
CVE-2022-2119
9.8
3%
Jun 24
OFFIS DCMTK's (All versions prior to 3.6.7) service class provider (SCP) is vulnerable to path traversal, allowing an attacker to write DICOM files into arbitrary directories…
Affected: before 3.6.7
CVE-2019-1010228
9.8
8%
Jul 22
OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow
Affected: through 3.6.3
CVE-2026-97059
8.2
0%
Sep 24
DCMTK through 3.7.0 Heap Over-read via NumberOfFrames
Affected: through 3.7.0
CVE-2024-27628
8.1
1%
Jun 28
Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component
Affected: 3.6.8
CVE-2025-9732
7.8
0%
Aug 31
DCMTK dcm2img diybrpxt.h memory corruption
Affected: through 3.6.9
CVE-2024-52333
7.8
1%
Jan 13
An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8
Affected: 3.6.8
CVE-2024-47796
7.8
1%
Jan 13
An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8
Affected: 3.6.8
CVE-2026-44031
7.5
0%
Oct 8
Uncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of service
Affected: 3.7.0
CVE-2025-25475
7.5
1%
Feb 18
A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DICOM file
Affected: 3.6.9
CVE-2024-28130
7.5
2%
Apr 23
An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8
Affected: 3.6.8
CVE-2022-43272
7.5
2%
Dec 2
DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object
Affected: 3.6.7
CVE-2021-41690
7.5
2%
Jun 28
DCMTK through 3.6.6 does not handle memory free properly
Affected: through 3.6.6
CVE-2021-41689
7.5
2%
Jun 28
DCMTK through 3.6.6 does not handle string copy properly
Affected: through 3.6.6
CVE-2021-41688
7.5
2%
Jun 28
DCMTK through 3.6.6 does not handle memory free properly
Affected: through 3.6.6
CVE-2021-41687
7.5
2%
Jun 28
DCMTK through 3.6.6 does not handle memory free properly
Affected: through 3.6.6
CVE-2025-25474
6.5
0%
Feb 18
DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h
Affected: 3.6.9
CVE-2022-2121
6.5
1%
Jun 24
OFFIS DCMTK's (All versions prior to 3.6.7) has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition
Affected: before 3.6.7
CVE-2026-12805
6.3
0%
Jun 21
OFFIS DCMTK ofxml.cc parseFile heap-based overflow
Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +2 more
CVE-2026-10194
6.3
0%
May 31
OFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflow
Affected: 3.7.0
CVE-2025-14607
6.3
0%
Dec 13
OFFIS DCMTK dcmdata dcbytstr.cc makeDicomByteString memory corruption
Affected: 3.6.0; 3.6.1; 3.6.2; 3.6.3; 3.6.4; 3.6.5; +4 more
CVE-2025-2357
6.3
0%
Mar 17
A vulnerability was found in DCMTK 3.6.9
Affected: 3.6.9
CVE-2026-44037
5.5
0%
Oct 8
Uncontrolled recursion in DCMTK JSON reader allows denial of service
Affected: 3.7.0
CVE-2026-44036
5.5
0%
Oct 8
Uncontrolled recursion in DCMTK xml2dcm allows denial of service
Affected: 3.7.0
CVE-2026-44035
5.5
0%
Oct 8
Uncontrolled recursion in DCMTK DICOMDIR parsing allows denial of service
Affected: 3.7.0
CVE-2026-44033
5.5
0%
Oct 8
Uncontrolled recursion in the DCMTK bundled XML parser allows denial of service
Affected: 3.7.0
CVE-2022-4981
5.5
0%
Oct 21
DCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereference
Affected: before 3.6.8
CVE-2020-36855
5.5
0%
Oct 21
DCMTK dcmqrscp parseQuota stack-based overflow
Affected: before 3.6.6
CVE-2025-25472
5.3
0%
Feb 18
A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file
Affected: 3.6.9
CVE-2024-34509
5.3
1%
May 5
dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message
Affected: before 3.6.9
CVE-2026-44038
4.4
0%
Oct 8
Global buffer out-of-bounds read in DCMTK JPEG Huffman decoding
Affected: 3.7.0
CVE-2026-44034
4.4
0%
Oct 8
Heap out-of-bounds read in DCMTK RLE decodeFrame()
Affected: 3.7.0
CVE-2024-34508
4.3
1%
May 5
dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message
Affected: before 3.6.9
CVE-2025-14841
3.3
0%
Dec 18
OFFIS DCMTK dcmqrscp dcmqrdbi.cc startMoveRequest null pointer dereference
Affected: 3.6.0; 3.6.1; 3.6.2; 3.6.3; 3.6.4; 3.6.5; +4 more
CVE-2013-6825
–
0%
Jun 10
(1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc/wlmactmg.cc, (5) dcmprscp.cc and (6) dcmpsrcv.cc in dcmpstat/apps/, (7)…
Affected: through 3.6.1; 3.5.1; 3.5.2; 3.5.2a; 3.5.3; 3.5.4; +1 more
Showing 36