DC
Product
DCMTK
36
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 4High 13Medium 17Low 1
Watch
Add DCMTK to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-5663 | 9.8 | Apr 6 | OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injection Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +2 more |
| CVE-2022-2120 | 9.8 | Jun 24 | OFFIS DCMTK's (All versions prior to 3.6.7) service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories… Affected: before 3.6.7 |
| CVE-2022-2119 | 9.8 | Jun 24 | OFFIS DCMTK's (All versions prior to 3.6.7) service class provider (SCP) is vulnerable to path traversal, allowing an attacker to write DICOM files into arbitrary directories… Affected: before 3.6.7 |
| CVE-2019-1010228 | 9.8 | Jul 22 | OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow Affected: through 3.6.3 |
Showing 4