Veille CVE

Recherche « OFFIS DICOM DCMTK Toolkit »

5 CVE

Critique 1 Élevée 4 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « OFFIS DICOM DCMTK Toolkit » ✕
  1. CVE-2026-52868 8.2 Élevée

    OFFIS DICOM DCMTK Toolkit

    An unauthenticated attacker can read worklist records from a directory outside the intended per-AE worklist storage area. In a multi-area deployment, this can cross departmental or clinic data separation.

  2. CVE-2026-50254 7.5 Élevée

    OFFIS DICOM DCMTK Toolkit

    An unauthenticated remote attacker can repeatedly send a single crafted connection request to leak memory. Against storescp in its default single-process mode, memory grows quickly and the service is eventually killed, after which it stops accepting connections until an operator restarts it.

  3. CVE-2026-50003 9.8 Critique

    OFFIS DICOM DCMTK Toolkit

    A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode write files outside the chosen output directory, using both relative (../) paths and absolute paths.

  4. CVE-2026-35505 7.5 Élevée

    OFFIS DICOM DCMTK Toolkit

    An unauthenticated remote attacker can repeatedly send crafted connection requests to leak memory. In single-process deployments the memory grows until the service is killed and the port stops responding until restart.

  5. CVE-2026-44628 7.5 Élevée

    OFFIS DICOM DCMTK Toolkit

    An unauthenticated attacker can crash the worklist server with a single crafted query when the server has a valid Called AE Title / storage directory, the expected lockfile, and at least one matching worklist record.