Dcm4Chee Arc Light
Approved changes feed: RSS · Atom
cpe:2.3:a:j4care:dcm4chee-arc-light:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | J4Care (3471975a-53f5-57b2-a478-3b8950f2afb7) |
|---|---|
| Product | Dcm4Chee Arc Light (103ada1a-8e72-5559-b716-c3f1dabd240b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-105273 |
vulnerable | 2026-11-03 10:16:33.091880 |
J4Care dcm4che Loop with Unreachable Exit Condition
HIGH (7.5)
MP4Parser does not adequately validate MP4 box sizes. A malformed box can cause parsing to make no forward progress and repeatedly process the same input.
Published: 2026-10-16T14:21:12.116Z
Updated: 2026-10-16T15:20:19.042Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-107621 |
vulnerable | 2026-11-03 10:15:59.481032 |
J4Care dcm4che Loop with Unreachable Exit Condition
HIGH (7.5)
JPEGParser can enter an infinite loop while parsing a specially crafted or truncated stream.
Published: 2026-10-16T14:19:32.673Z
Updated: 2026-10-16T15:20:19.201Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-97851 |
vulnerable | 2026-11-03 10:15:26.723738 |
J4Care dcm4che Missing Authorization
CRITICAL (9.1)
The storage status-change REST service allows location records still associated with DICOM instances to be changed to deletion-related states. Changing a location to TO_DELETE causes PurgeStorageScheduler to delete the referenced object from storage even though the corresponding instance record remains in the database.
Published: 2026-10-16T14:16:55.229Z
Updated: 2026-10-16T15:20:19.499Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-101021 |
vulnerable | 2026-11-03 10:15:22.744913 |
J4Care dcm4che Inefficient Algorithmic Complexity
HIGH (7.5)
MultipartInputStream performs inefficient boundary matching and unnecessary buffer copying. Crafted multipart input can force excessive boundary comparisons and repeated copying.
Published: 2026-10-16T14:28:54.992Z
Updated: 2026-10-16T15:20:18.725Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.