Approved changes feed: RSS · Atom
cpe:2.3:a:n/a:dcmtk:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | N/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78) |
|---|---|
| Product | Dcmtk (bff30fba-139f-5510-a8bf-e87368c54caf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9732 |
vulnerable | 2026-06-08 07:47:09.672767 |
DCMTK dcm2img diybrpxt.h memory corruption
MEDIUM (5.3)
A vulnerability was identified in DCMTK up to 3.6.9. This affects an unknown function in the library dcmimage/include/dcmtk/dcmimage/diybrpxt.h of the component dcm2img. Such manipulation leads to memory corruption. Local access is required to approach this attack. The name of the patch is 7ad81d69b. It is best practice to apply a patch to resolve this issue.
Published: 2025-08-31T14:02:06.157Z
Updated: 2025-09-02T15:14:25.595Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2357 |
vulnerable | 2026-06-08 07:16:56.861401 |
DCMTK dcmjpls JPEG-LS Decoder memory corruption
MEDIUM (6.3)
A vulnerability was found in DCMTK 3.6.9. It has been declared as critical. This vulnerability affects unknown code of the component dcmjpls JPEG-LS Decoder. The manipulation leads to memory corruption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 3239a7915. It is recommended to apply a patch to fix this issue.
Published: 2025-03-17T01:31:04.874Z
Updated: 2025-11-03T19:43:06.629Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4981 |
vulnerable | 2026-06-08 05:52:02.889907 |
DCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereference
LOW (3.3)
A vulnerability was detected in DCMTK up to 3.6.7. The impacted element is the function DcmQueryRetrieveConfig::readPeerList of the file /dcmqrcnf.cc of the component dcmqrscp. The manipulation results in null pointer dereference. The attack needs to be approached locally. The exploit is now public and may be used. Upgrading to version 3.6.8 is sufficient to resolve this issue. The patch is identified as 957fb31e5. Upgrading the affected component is advised.
Published: 2025-10-21T15:02:13.727Z
Updated: 2025-10-21T15:22:40.779Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36855 |
vulnerable | 2026-06-08 05:25:49.662238 |
DCMTK dcmqrscp parseQuota stack-based overflow
MEDIUM (5.3)
A security vulnerability has been detected in DCMTK up to 3.6.5. The affected element is the function parseQuota of the component dcmqrscp. The manipulation of the argument StorageQuota leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. Upgrading to version 3.6.6 is sufficient to fix this issue. The identifier of the patch is 0fef9f02e. It is recommended to upgrade the affected component.
Published: 2025-10-21T15:02:09.082Z
Updated: 2025-10-21T15:23:26.003Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.