Search CVE reports


Toggle filters

1 – 10 of 22 results


CVE-2025-9732

Low priority
Needs evaluation

A vulnerability was identified in DCMTK up to 3.6.9. This affects an unknown function in the library dcmimage/include/dcmtk/dcmimage/diybrpxt.h of the component dcm2img. Such manipulation leads to memory corruption. Local access...

1 affected package

dcmtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dcmtk Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-2357

Medium priority
Needs evaluation

A vulnerability was found in DCMTK 3.6.9. It has been declared as critical. This vulnerability affects unknown code of the component dcmjpls JPEG-LS Decoder. The manipulation leads to memory corruption. The attack can be initiated...

1 affected package

dcmtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dcmtk Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-25475

Medium priority
Needs evaluation

A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DICOM file.

1 affected package

dcmtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dcmtk Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-25474

Medium priority
Needs evaluation

DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h.

1 affected package

dcmtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dcmtk Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-25472

Medium priority
Needs evaluation

A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file.

1 affected package

dcmtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dcmtk Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-52333

Medium priority
Needs evaluation

An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to...

1 affected package

dcmtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dcmtk Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-47796

Medium priority
Needs evaluation

An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger...

1 affected package

dcmtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dcmtk Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-27628

Medium priority
Needs evaluation

Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component.

1 affected package

dcmtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dcmtk Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-34509

Medium priority

Some fixes available 5 of 8

dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.

1 affected package

dcmtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dcmtk Fixed Fixed Fixed Fixed
Show less packages

CVE-2024-34508

Medium priority

Some fixes available 5 of 8

dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.

1 affected package

dcmtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dcmtk Fixed Fixed Fixed Fixed
Show less packages