OFFIS DCMTK vulnerabilities

CVEs per yearBy the year they were published

1. 20223
2. 20241
3. 20254
4. 202611

Newest CVEs

• CVE-2026-44038

  Global buffer out-of-bounds read in DCMTK JPEG Huffman decoding

  OFFIS · DCMTK

  Medium4.8
• CVE-2026-44037

  Uncontrolled recursion in DCMTK JSON reader allows denial of service

  OFFIS · DCMTK

  Medium6.8
• CVE-2026-44036

  Uncontrolled recursion in DCMTK xml2dcm allows denial of service

  OFFIS · DCMTK

  Medium6.8
• CVE-2026-44035

  Uncontrolled recursion in DCMTK DICOMDIR parsing allows denial of service

  OFFIS · DCMTK

  Medium6.8
• CVE-2026-44034

  Heap out-of-bounds read in DCMTK RLE decodeFrame()

  OFFIS · DCMTK

  Medium4.8
• CVE-2026-44033

  Uncontrolled recursion in the DCMTK bundled XML parser allows denial of service

  OFFIS · DCMTK

  Medium6.8
• CVE-2026-44031

  Uncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of service

  OFFIS · DCMTK

  High8.7
• CVE-2026-97059

  DCMTK through 3.7.0 Heap Over-read via NumberOfFrames

  OFFIS · DCMTK

  High8.8
• CVE-2026-12805

  OFFIS DCMTK ofxml.cc parseFile heap-based overflow

  OFFIS · DCMTK

  Medium5.3
• CVE-2026-10194

  OFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflow

  OFFIS · DCMTK

  Medium5.3