These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A global out-of-bounds read in the Huffman decoder of the bundled IJG JPEG libraries of OFFIS DCMTK 3.7.0 allows an attacker to read memory beyond the extend_test[] and extend_offset[] tables, causing incorrectly decoded pixel data or a crash, via a DICOM file with a crafted JPEG stream whose Huffman table defines a difference category above 15. This issue can lead to potential crashes or incorrect pixel [truncated]
CVE-2026-44037 is a denial-of-service vulnerability in the DCMTK JSON reader due to uncontrolled recursion. Defenders should assess exposure, particularly for systems handling DICOM JSON documents. The vulnerability allows an attacker to cause a denial of service via a crafted DICOM JSON document with deeply nested sequence (SQ) values. The json2dcm tool and any service that converts untrusted DICOM JSON [truncated]
CVE-2026-44036 is a denial-of-service vulnerability in DCMTK's xml2dcm tool caused by uncontrolled recursion when parsing deeply nested XML sequences. Defenders should assess exposure, prioritize remediation, and verify fixes. The vulnerability is caused by mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence(). Affected deployments require immediate attention, e [truncated]
A denial-of-service vulnerability exists in DCMTK 3.7.0 due to uncontrolled recursion in DICOMDIR parsing. This issue allows an attacker to cause a stack exhaustion and process crash via a crafted DICOMDIR file. The vulnerability is caused by the DcmDicomDir::moveRecordToTree() function in dcmdata/libsrc/dcdicdir.cc, which does not properly handle deeply chained sequences of directory records linked throu [truncated]
A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame() in DCMTK 3.7.0 allows an attacker to read up to 63 bytes of adjacent heap memory, or cause a crash, via a crafted RLE Lossless DICOM file. Applications that decode RLE images frame by frame are affected. The issue is fixed in commit 45469f3c30037e9c7159290e4bb74cd7b3b9ef1d. This vulnerability has a medium severity level and can lead to d [truncated]
A denial-of-service vulnerability exists in OFFIS DCMTK 3.7.0 due to uncontrolled recursion in the bundled XML parser. This issue allows an attacker to cause a stack exhaustion and process crash via a crafted XML document with deeply nested elements. The vulnerability is reachable through dcmencap when encapsulating a CDA document, and through any application that calls OFXMLParser::parseFile() or OFXMLPa [truncated]
A vulnerability in the DCMTK DICOM dataset parser allows unauthenticated remote denial of service via deeply nested sequences in a DICOM dataset. The issue is fixed in a commit that adds a configurable sequence nesting depth limit. This vulnerability affects systems using DCMTK for DICOM data processing, particularly in medical imaging and healthcare environments. Defenders should assess exposure and prio [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-06-30T06:00:00.000Z and has not been modified since then. OFFIS DCMTK Toolkit is vulnerable to an issue allowing unauthenticated attackers to read worklist records from a directory outside the intended per-AE worklist storage area. This can lead to cross-departmental or clinic data separation in multi- [truncated]
CVE-2026-12805 is a heap-based buffer overflow vulnerability in OFFIS DCMTK up to 3.7.0. The issue is in the XMLNode::parseFile function in ofstd/libsrc/ofxml.cc. This flaw can be exploited remotely. The CVSS score is 2.1, indicating a low severity. The vendor responded professionally and released a fixed version quickly. To limit exposure, defenders should prioritize patching.
A heap-based buffer overflow vulnerability exists in OFFIS DCMTK 3.7.0 within the dcmqrscp component. The flaw resides in the DcmQueryRetrieveIndexDatabaseHandle::deleteOldestImages function in dcmqrdb/libsrc/dcmqrdbi.cc. A remote attacker can trigger this weakness through manipulation, resulting in heap memory corruption. The vulnerability is classified as MEDIUM severity with a CVSS score of 5.3. A patc [truncated]