# OFFIS DCMTK.

Every CVE that names OFFIS DCMTK among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Global buffer out-of-bounds read in DCMTK JPEG Huffman decoding](https://agentprime.io/advisories/CVE-2026-44038.md)
  `CVE-2026-44038` · CVE record: OFFIS DCMTK · CVSS 4.8 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Memory corruption
- [Uncontrolled recursion in DCMTK JSON reader allows denial of service](https://agentprime.io/advisories/CVE-2026-44037.md)
  `CVE-2026-44037` · CVE record: OFFIS DCMTK · CVSS 6.8 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Uncontrolled recursion in DCMTK xml2dcm allows denial of service](https://agentprime.io/advisories/CVE-2026-44036.md)
  `CVE-2026-44036` · CVE record: OFFIS DCMTK · CVSS 6.8 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Uncontrolled recursion in DCMTK DICOMDIR parsing allows denial of service](https://agentprime.io/advisories/CVE-2026-44035.md)
  `CVE-2026-44035` · CVE record: OFFIS DCMTK · CVSS 6.8 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Heap out-of-bounds read in DCMTK RLE decodeFrame()](https://agentprime.io/advisories/CVE-2026-44034.md)
  `CVE-2026-44034` · CVE record: OFFIS DCMTK · CVSS 4.8 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Memory corruption
- [Uncontrolled recursion in the DCMTK bundled XML parser allows denial of service](https://agentprime.io/advisories/CVE-2026-44033.md)
  `CVE-2026-44033` · CVE record: OFFIS DCMTK · CVSS 6.8 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [Uncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of service](https://agentprime.io/advisories/CVE-2026-44031.md)
  `CVE-2026-44031` · CVE record: OFFIS DCMTK · CVSS 8.7 High · Not analysed yet · Published 8 Oct 2026 · Tags: Denial of service
- [DCMTK through 3.7.0 Heap Over-read via NumberOfFrames](https://agentprime.io/advisories/CVE-2026-97059.md)
  `CVE-2026-97059` · CVE record: OFFIS DCMTK · CVSS 8.8 High · Not analysed yet · Published 24 Sept 2026 · Tags: Memory corruption
- [OFFIS DCMTK ofxml.cc parseFile heap-based overflow](https://agentprime.io/advisories/CVE-2026-12805.md)
  `CVE-2026-12805` · CVE record: OFFIS DCMTK · CVSS 5.3 Medium · Not analysed yet · Published 21 Jun 2026 · Tags: Memory corruption
- [OFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflow](https://agentprime.io/advisories/CVE-2026-10194.md)
  `CVE-2026-10194` · CVE record: OFFIS DCMTK · CVSS 5.3 Medium · Not analysed yet · Published 31 May 2026 · Tags: Memory corruption
- [OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injection](https://agentprime.io/advisories/CVE-2026-5663.md)
  `CVE-2026-5663` · CVE record: OFFIS DCMTK · CVSS 6.9 Medium · Not analysed yet · Published 6 Apr 2026 · Tags: Command injection
- [OFFIS DCMTK dcmqrscp dcmqrdbi.cc startMoveRequest null pointer dereference](https://agentprime.io/advisories/CVE-2025-14841.md)
  `CVE-2025-14841` · CVE record: OFFIS DCMTK · CVSS 4.8 Medium · Not analysed yet · Published 18 Dec 2025 · Tags: Denial of service, Memory corruption
- [OFFIS DCMTK dcmdata dcbytstr.cc makeDicomByteString memory corruption](https://agentprime.io/advisories/CVE-2025-14607.md)
  `CVE-2025-14607` · CVE record: OFFIS DCMTK · CVSS 5.3 Medium · Not analysed yet · Published 13 Dec 2025 · Tags: Memory corruption
- [Buffer overflow in OFFIS DCMTK](https://agentprime.io/advisories/CVE-2024-52333.md)
  `CVE-2024-52333` · CVE record: OFFIS DCMTK · CVSS 8.4 High · Not analysed yet · Published 13 Jan 2025 · Tags: Memory corruption
- [Buffer overflow in OFFIS DCMTK](https://agentprime.io/advisories/CVE-2024-47796.md)
  `CVE-2024-47796` · CVE record: OFFIS DCMTK · CVSS 8.4 High · Not analysed yet · Published 13 Jan 2025 · Tags: Memory corruption
- [Incorrect type conversion in OFFIS DCMTK](https://agentprime.io/advisories/CVE-2024-28130.md)
  `CVE-2024-28130` · CVE record: OFFIS DCMTK · CVSS 7.5 High · Not analysed yet · Published 23 Apr 2024 · Tags: CWE-704
- [OFFIS DCMTK Path Traversal](https://agentprime.io/advisories/CVE-2022-2119.md)
  `CVE-2022-2119` · CVE record: OFFIS DCMTK · CVSS 7.5 High · Not analysed yet · Published 24 Jun 2022 · Tags: Path traversal
- [OFFIS DCMTK NULL Pointer Dereference](https://agentprime.io/advisories/CVE-2022-2121.md)
  `CVE-2022-2121` · CVE record: OFFIS DCMTK · CVSS 7.5 High · Not analysed yet · Published 24 Jun 2022 · Tags: Memory corruption
- [OFFIS DCMTK Path Traversal](https://agentprime.io/advisories/CVE-2022-2120.md)
  `CVE-2022-2120` · CVE record: OFFIS DCMTK · CVSS 7.5 High · Not analysed yet · Published 24 Jun 2022 · Tags: Path traversal

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=offis-dcmtk>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/offis-dcmtk/>. Everything for agents: <https://agentprime.io/llms.txt>.