OOFFIS

Products

Exploited and recent CVEs

• CVE-2026-44038 Medium 4.4 Global buffer out-of-bounds read in DCMTK JPEG Huffman decoding 0.1%
• CVE-2026-44037 Medium 5.5 Uncontrolled recursion in DCMTK JSON reader allows denial of service 0.1%
• CVE-2026-44036 Medium 5.5 Uncontrolled recursion in DCMTK xml2dcm allows denial of service 0.1%
• CVE-2026-44035 Medium 5.5 Uncontrolled recursion in DCMTK DICOMDIR parsing allows denial of service 0.1%
• CVE-2026-44034 Medium 4.4 Heap out-of-bounds read in DCMTK RLE decodeFrame() 0.1%
• CVE-2026-44033 Medium 5.5 Uncontrolled recursion in the DCMTK bundled XML parser allows denial of service 0.1%
• CVE-2026-44031 High 7.5 Uncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of service 0.4%
• CVE-2026-97059 High 8.2 DCMTK through 3.7.0 Heap Over-read via NumberOfFrames 0.3%
• CVE-2026-12805 Medium 6.3 OFFIS DCMTK ofxml.cc parseFile heap-based overflow 0.5%
• CVE-2026-10194 Medium 6.3 OFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflow 0.2%
• CVE-2026-5663 High 7.3 OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injection 2.0%
• CVE-2025-14841 Low 3.3 OFFIS DCMTK dcmqrscp dcmqrdbi.cc startMoveRequest null pointer dereference 0.1%
• CVE-2025-14607 Medium 6.3 OFFIS DCMTK dcmdata dcbytstr.cc makeDicomByteString memory corruption 0.3%
• CVE-2024-52333 High 8.4 An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can pr 0.6%
• CVE-2024-47796 High 8.4 An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a 0.6%
• CVE-2024-28130 High 7.5 An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execut 1.7%
• CVE-2022-2119 High 7.5 OFFIS DCMTK Path Traversal 3.4%
• CVE-2022-2121 High 7.5 OFFIS DCMTK NULL Pointer Dereference 0.8%
• CVE-2022-2120 High 7.5 OFFIS DCMTK Path Traversal 3.4%