Vulnerability · Published Oct 21, 2025 · Assigned by VulDB

CVE-2020-36855DCMTK dcmqrscp parseQuota stack-based overflow

Medium 5.3

In plain English

A medium-severity stack buffer overflow in DCMTK. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.2%top 84.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A security vulnerability has been detected in DCMTK up to 3.6.5. The affected element is the function parseQuota of the component dcmqrscp. The manipulation of the argument StorageQuota leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. Upgrading to version 3.6.6 is sufficient to fix this issue. The identifier of the patch is 0fef9f02e. It is recommended to upgrade the affected component.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:12	dcmtk	3.6.6-1	DEBIAN-CVE-2020-36855
Debian:13	dcmtk	3.6.6-1	DEBIAN-CVE-2020-36855
Debian:14	dcmtk	3.6.6-1	DEBIAN-CVE-2020-36855

Affected products (as reported)

Vendor	Product	Versions
n/a	DCMTK	3.6.03.6.13.6.23.6.33.6.43.6.5

Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

References

VDB-329028 | DCMTK dcmqrscp parseQuota stack-based overflow vdb-entry, technical-description
VDB-329028 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #673137 | DCMTK GitHub Repository DCMTK 3.6.5 Stack-based Buffer Overflow third-party-advisory
https://shimo.im/docs/rp3OMVMDPKtjn0km/ exploit
https://shimo.im/docs/rp3OMVMDPKtjn0km/read exploit