Approved changes feed: RSS · Atom

cpe:2.3:a:numfocus:simpleitk:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNumfocus (decd3bc5-e50c-5256-bcd0-dcd92b48f67f)
ProductSimpleitk (9d657cee-a5e6-5c02-83e2-c5e309dbb35f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-11266 vulnerable 2026-06-08 07:02:28.511393 Grassroots DICOM (GDCM) Out-of-bounds Write
MEDIUM (6.6)
An out-of-bounds write vulnerability exists in the Grassroots DICOM library (GDCM). The issue is triggered during parsing of a malformed DICOM file containing encapsulated PixelData fragments (compressed image data stored as multiple fragments). This vulnerability leads to a segmentation fault caused by an out-of-bounds memory access due to unsigned integer underflow in buffer indexing. It is exploitable via file input, simply opening a crafted malicious DICOM file is sufficient to trigger the crash, resulting in a denial-of-service condition.
Published: 2025-12-12T20:48:57.303Z
Updated: 2026-01-20T20:25:52.481Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.