DC
Product
DCMTK
36
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 4High 13Medium 17Low 1
Watch
Add DCMTK to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-25474 | 6.5 | Feb 18 | DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h Affected: 3.6.9 |
| CVE-2022-2121 | 6.5 | Jun 24 | OFFIS DCMTK's (All versions prior to 3.6.7) has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition Affected: before 3.6.7 |
| CVE-2026-12805 | 6.3 | Jun 21 | OFFIS DCMTK ofxml.cc parseFile heap-based overflow Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +2 more |
| CVE-2026-10194 | 6.3 | May 31 | OFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflow Affected: 3.7.0 |
| CVE-2025-14607 | 6.3 | Dec 13 | OFFIS DCMTK dcmdata dcbytstr.cc makeDicomByteString memory corruption Affected: 3.6.0; 3.6.1; 3.6.2; 3.6.3; 3.6.4; 3.6.5; +4 more |
| CVE-2025-2357 | 6.3 | Mar 17 | A vulnerability was found in DCMTK 3.6.9 Affected: 3.6.9 |
| CVE-2026-44037 | 5.5 | Oct 8 | Uncontrolled recursion in DCMTK JSON reader allows denial of service Affected: 3.7.0 |
| CVE-2026-44036 | 5.5 | Oct 8 | Uncontrolled recursion in DCMTK xml2dcm allows denial of service Affected: 3.7.0 |
| CVE-2026-44035 | 5.5 | Oct 8 | Uncontrolled recursion in DCMTK DICOMDIR parsing allows denial of service Affected: 3.7.0 |
| CVE-2026-44033 | 5.5 | Oct 8 | Uncontrolled recursion in the DCMTK bundled XML parser allows denial of service Affected: 3.7.0 |
| CVE-2022-4981 | 5.5 | Oct 21 | DCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereference Affected: before 3.6.8 |
| CVE-2020-36855 | 5.5 | Oct 21 | DCMTK dcmqrscp parseQuota stack-based overflow Affected: before 3.6.6 |
| CVE-2025-25472 | 5.3 | Feb 18 | A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file Affected: 3.6.9 |
| CVE-2024-34509 | 5.3 | May 5 | dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message Affected: before 3.6.9 |
| CVE-2026-44038 | 4.4 | Oct 8 | Global buffer out-of-bounds read in DCMTK JPEG Huffman decoding Affected: 3.7.0 |
| CVE-2026-44034 | 4.4 | Oct 8 | Heap out-of-bounds read in DCMTK RLE decodeFrame() Affected: 3.7.0 |
| CVE-2024-34508 | 4.3 | May 5 | dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message Affected: before 3.6.9 |
Showing 17