Skip to content
Threat Feed
Subscribe

Tag

Dcmtk

2 briefs RSS
high advisory

Heap Over-read Vulnerability in DCMTK ConcatenationLoader

DCMTK version 3.7.0 and earlier contains a heap over-read vulnerability in the ConcatenationLoader component that can lead to information disclosure or application crashes when processing malformed DICOM files.

DCMTK vulnerability dicom medical-imaging
1t 1c
high advisory

OFFIS DCMTK Command Injection Vulnerability (CVE-2026-5663)

A remote command injection vulnerability exists in OFFIS DCMTK version 3.7.0 and earlier due to insufficient input sanitization in the `storescp` application, potentially allowing unauthenticated attackers to execute arbitrary OS commands.

command-injection dcmtk cve-2026-5663 storescp
2r 1t 1c