Login Request a demo
DC
Product
DCMTK
by OFFIS · last CVE Oct 8, 2026
36
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Vulnerabilities36In the news0Timeline
Severity mix
Critical 4High 13Medium 17Low 1
Severity
All severities36Critical4High13Medium17Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add DCMTK to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-97059
8.2
0%
Sep 24
DCMTK through 3.7.0 Heap Over-read via NumberOfFrames
Affected: through 3.7.0
CVE-2024-27628
8.1
1%
Jun 28
Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component
Affected: 3.6.8
CVE-2025-9732
7.8
0%
Aug 31
DCMTK dcm2img diybrpxt.h memory corruption
Affected: through 3.6.9
CVE-2024-52333
7.8
1%
Jan 13
An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8
Affected: 3.6.8
CVE-2024-47796
7.8
1%
Jan 13
An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8
Affected: 3.6.8
CVE-2026-44031
7.5
0%
Oct 8
Uncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of service
Affected: 3.7.0
CVE-2025-25475
7.5
1%
Feb 18
A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DICOM file
Affected: 3.6.9
CVE-2024-28130
7.5
2%
Apr 23
An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8
Affected: 3.6.8
CVE-2022-43272
7.5
2%
Dec 2
DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object
Affected: 3.6.7
CVE-2021-41690
7.5
2%
Jun 28
DCMTK through 3.6.6 does not handle memory free properly
Affected: through 3.6.6
CVE-2021-41689
7.5
2%
Jun 28
DCMTK through 3.6.6 does not handle string copy properly
Affected: through 3.6.6
CVE-2021-41688
7.5
2%
Jun 28
DCMTK through 3.6.6 does not handle memory free properly
Affected: through 3.6.6
CVE-2021-41687
7.5
2%
Jun 28
DCMTK through 3.6.6 does not handle memory free properly
Affected: through 3.6.6
Showing 13