Login Request a demo
OF
Vendor
OFFIS
1 product with CVEs on record
36
CVEs
0
On KEV
7
New 30D
Products
DC
DCMTK
OFFIS
9.8
36 CVEs0 on KEV7 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-44038
DC
DCMTK
OFFIS
4.4
0%
Oct 8Global buffer out-of-bounds read in DCMTK JPEG Huffman decoding
CVE-2026-44037
DC
DCMTK
OFFIS
5.5
0%
Oct 8Uncontrolled recursion in DCMTK JSON reader allows denial of service
CVE-2026-44036
DC
DCMTK
OFFIS
5.5
0%
Oct 8Uncontrolled recursion in DCMTK xml2dcm allows denial of service
CVE-2026-44035
DC
DCMTK
OFFIS
5.5
0%
Oct 8Uncontrolled recursion in DCMTK DICOMDIR parsing allows denial of service
CVE-2026-44034
DC
DCMTK
OFFIS
4.4
0%
Oct 8Heap out-of-bounds read in DCMTK RLE decodeFrame()
CVE-2026-44033
DC
DCMTK
OFFIS
5.5
0%
Oct 8Uncontrolled recursion in the DCMTK bundled XML parser allows denial of service
CVE-2026-44031
DC
DCMTK
OFFIS
7.5
0%
Oct 8Uncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of service
CVE-2026-97059
DC
DCMTK
OFFIS
8.2
0%
Sep 24DCMTK through 3.7.0 Heap Over-read via NumberOfFrames
CVE-2026-12805
DC
DCMTK
OFFIS
6.3
0%
Jun 21OFFIS DCMTK ofxml.cc parseFile heap-based overflow
CVE-2026-10194
DC
DCMTK
OFFIS
6.3
0%
May 31OFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflow
CVE-2026-5663
DC
DCMTK
OFFIS
9.8
2%
Apr 6OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injection
CVE-2025-14841
DC
DCMTK
OFFIS
3.3
0%
Dec 18OFFIS DCMTK dcmqrscp dcmqrdbi.cc startMoveRequest null pointer dereference
CVE-2025-14607
DC
DCMTK
OFFIS
6.3
0%
Dec 13OFFIS DCMTK dcmdata dcbytstr.cc makeDicomByteString memory corruption
CVE-2022-4981
DC
Dcmtk
Offis
5.5
0%
Oct 21DCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereference
CVE-2020-36855
DC
Dcmtk
Offis
5.5
0%
Oct 21DCMTK dcmqrscp parseQuota stack-based overflow
CVE-2025-9732
DC
Dcmtk
Offis
7.8
0%
Aug 31DCMTK dcm2img diybrpxt.h memory corruption
CVE-2025-2357
DC
Dcmtk
Offis
6.3
0%
Mar 17A vulnerability was found in DCMTK 3.6.9
CVE-2025-25475
DC
Dcmtk
Offis
7.5
1%
Feb 18A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DICOM file
CVE-2025-25474
DC
Dcmtk
Offis
6.5
0%
Feb 18DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h
CVE-2025-25472
DC
Dcmtk
Offis
5.3
0%
Feb 18A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file
CVE-2024-52333
DC
Dcmtk
Offis
7.8
1%
Jan 13An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8
CVE-2024-47796
DC
Dcmtk
Offis
7.8
1%
Jan 13An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8
CVE-2024-27628
DC
Dcmtk
Offis
8.1
1%
Jun 28Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component
CVE-2024-34509
DC
Dcmtk
Offis
5.3
1%
May 5dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message
CVE-2024-34508
DC
Dcmtk
Offis
4.3
1%
May 5dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message
CVE-2024-28130
DC
Dcmtk
Offis
7.5
2%
Apr 23An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8
CVE-2022-43272
DC
Dcmtk
Offis
7.5
2%
Dec 2DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object
CVE-2021-41690
DC
Dcmtk
Offis
7.5
2%
Jun 28DCMTK through 3.6.6 does not handle memory free properly
CVE-2021-41689
DC
Dcmtk
Offis
7.5
2%
Jun 28DCMTK through 3.6.6 does not handle string copy properly
CVE-2021-41688
DC
Dcmtk
Offis
7.5
2%
Jun 28DCMTK through 3.6.6 does not handle memory free properly
CVE-2021-41687
DC
Dcmtk
Offis
7.5
2%
Jun 28DCMTK through 3.6.6 does not handle memory free properly
CVE-2022-2121
DC
Dcmtk
Offis
6.5
1%
Jun 24OFFIS DCMTK's (All versions prior to 3.6.7) has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition
CVE-2022-2120
DC
Dcmtk
Offis
9.8
3%
Jun 24OFFIS DCMTK's (All versions prior to 3.6.7) service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories…
CVE-2022-2119
DC
Dcmtk
Offis
9.8
3%
Jun 24OFFIS DCMTK's (All versions prior to 3.6.7) service class provider (SCP) is vulnerable to path traversal, allowing an attacker to write DICOM files into arbitrary directories…
CVE-2019-1010228
DC
Dcmtk
Offis
9.8
8%
Jul 22OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow
CVE-2013-6825
DC
Dcmtk
Offis
–
0%
Jun 10(1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc/wlmactmg.cc, (5) dcmprscp.cc and (6) dcmpsrcv.cc in dcmpstat/apps/, (7)…