OFFIS DCMTK Toolkit

Expand All + CVE-2026-50003 A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode write files outside the chosen output directory, using both relative (.. /) paths and absolute paths. View CVE Details Affected Products OFFIS DCMTK Toolkit Vendor:OFFIS Product Version:OFFIS DCMTK: <=3. 7. 0 Product Status:known_affected Remediations MitigationThe maintainer was notified of these vulnerabilities and has provided a fix.

The fix is included in the latest commits and can be obtained in the following snapshot: Vendor fixhttps://github. com/DCMTK/dcmtk/releases/tag/latest. https://github. com/DCMTK/dcmtk/releases/tag/latest MitigationUsers are recommended to download the latest GitHub release once it becomes available. Relevant CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Metrics CVSS Version Base Score Base Severity Vector String 3.

1 9. 8 CRITICAL CVSS:3. 1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 4. 0 9. 3 CRITICAL CVSS:4.

0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-50254 An unauthenticated remote attacker can repeatedly send a single crafted connection request to leak memory. Against storescp in its default single-process mode, memory grows quickly and the service is eventually killed, after which it stops accepting connections until an operator restarts it. View CVE Details Affected Products OFFIS DCMTK Toolkit Vendor:OFFIS Product Version:OFFIS DCMTK: <=3. 7. 0 Product Status:known_affected Remediations MitigationThe maintainer was notified of these vulnerabilities and has provided a fix.

The fix is included in the latest commits and can be obtained in the following snapshot: Vendor fixhttps://github. com/DCMTK/dcmtk/releases/tag/latest. https://github. com/DCMTK/dcmtk/releases/tag/latest MitigationUsers are recommended to download the latest GitHub release once it becomes available.