OFFIS DCMTK Toolkit
Successful exploitation of these vulnerabilities could allow an attacker to write files, access unauthorized information, exhaust memory, or crash affected DCMTK client or server processes.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-52868US | — | — | ||
An unauthenticated attacker can read worklist records from a directory outside the intended per-AE worklist storage area. In a multi-area deployment, this can cross departmental or… | ||||
| CVE-2026-50254US | — | — | ||
An unauthenticated remote attacker can repeatedly send a single crafted connection request to leak memory. Against storescp in its default single-process mode, memory grows quickly… | ||||
| CVE-2026-50003US | — | — | ||
A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode write files outside the chosen output directory, using both relative (../) paths a… | ||||
| CVE-2026-35505US | — | — | ||
An unauthenticated remote attacker can repeatedly send crafted connection requests to leak memory. In single-process deployments the memory grows until the service is killed and th… | ||||
| CVE-2026-44628US | — | — | ||
An unauthenticated attacker can crash the worklist server with a single crafted query when the server has a valid Called AE Title / storage directory, the expected lockfile, and at… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSMA-26-181-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSMA-26-181-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (10)
- MitigationDCMTK
The maintainer was notified of these vulnerabilities and has provided a fix. The fix is included in the latest commits and can be obtained in the following snapshot:
- MitigationDCMTK
The maintainer was notified of these vulnerabilities and has provided a fix. The fix is included in the latest commits and can be obtained in the following snapshot:
- MitigationDCMTK
The maintainer was notified of these vulnerabilities and has provided a fix. The fix is included in the latest commits and can be obtained in the following snapshot:
- MitigationDCMTK
The maintainer was notified of these vulnerabilities and has provided a fix. The fix is included in the latest commits and can be obtained in the following snapshot:
- MitigationDCMTK
The maintainer was notified of these vulnerabilities and has provided a fix. The fix is included in the latest commits and can be obtained in the following snapshot:
- FixedDCMTK
https://github.com/DCMTK/dcmtk/releases/tag/latest.
https://github.com/DCMTK/dcmtk/releases/tag/latest - FixedDCMTK
https://github.com/DCMTK/dcmtk/releases/tag/latest.
https://github.com/DCMTK/dcmtk/releases/tag/latest - FixedDCMTK
https://github.com/DCMTK/dcmtk/releases/tag/latest.
https://github.com/DCMTK/dcmtk/releases/tag/latest - FixedDCMTK
https://github.com/DCMTK/dcmtk/releases/tag/latest.
https://github.com/DCMTK/dcmtk/releases/tag/latest - FixedDCMTK
https://github.com/DCMTK/dcmtk/releases/tag/latest.
https://github.com/DCMTK/dcmtk/releases/tag/latest
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan