What is CVE-2021-41688?

CVE-2021-41688 is a high-severity vulnerability in Offis Dcmtk, classified under Double Free. CVSS score: 7.5/10. Published 2022-06-28.

How severe is CVE-2021-41688?

High severity. CVSS v3 base score is 7.5 out of 10.

Double Free in Offis Dcmtk

CVE-2021-41688

DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but its address is still used in other locations. Sending specific requests to the dcmqrdb program will incur a double free. An attacker can use it…

Vulnerability class: Double Free

EPSS: 0.016 (73.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Offis Dcmtk
N/a — versions n/a

Weakness classification (CWE)

CWE-415 — Double Free

References

cve@mitre.org (Product, Third Party Advisory)
cve@mitre.org (Patch, Third Party Advisory)
cve@mitre.org (mailing-list)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2021-41688?: CVE-2021-41688 is a high-severity vulnerability in Offis Dcmtk, classified under Double Free. CVSS score: 7.5/10. Published 2022-06-28.
How severe is CVE-2021-41688?: High severity. CVSS v3 base score is 7.5 out of 10.