Search CVE reports


Toggle filters

1 – 10 of 21 results


CVE-2025-25475

Medium priority
Needs evaluation

A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DICOM file.

1 affected package

dcmtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dcmtk Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-25474

Medium priority
Needs evaluation

DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h.

1 affected package

dcmtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dcmtk Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-25472

Medium priority
Needs evaluation

A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file.

1 affected package

dcmtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dcmtk Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-2357

Medium priority
Needs evaluation

A vulnerability was found in DCMTK 3.6.9. It has been declared as critical. This vulnerability affects unknown code of the component dcmjpls JPEG-LS Decoder. The manipulation leads to memory corruption. The attack can be initiated...

1 affected package

dcmtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dcmtk Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-52333

Medium priority
Needs evaluation

An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to...

1 affected package

dcmtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dcmtk Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-47796

Medium priority
Needs evaluation

An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger...

1 affected package

dcmtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dcmtk Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-34509

Medium priority

Some fixes available 5 of 8

dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.

1 affected package

dcmtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dcmtk Fixed Fixed Fixed Fixed
Show less packages

CVE-2024-34508

Medium priority

Some fixes available 5 of 8

dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.

1 affected package

dcmtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dcmtk Fixed Fixed Fixed Fixed
Show less packages

CVE-2024-28130

Medium priority

Some fixes available 2 of 7

An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a...

1 affected package

dcmtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dcmtk Needs evaluation Fixed Fixed Needs evaluation
Show less packages

CVE-2024-27628

Medium priority
Needs evaluation

Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component.

1 affected package

dcmtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dcmtk Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages