NULL pointer dereference in Offis Dcmtk
CVE-2022-4981
A vulnerability was detected in DCMTK up to 3.6.7. The impacted element is the function DcmQueryRetrieveConfig::readPeerList of the file /dcmqrcnf.cc of the component dcmqrscp. The manipulation results in null pointer dereference. The atta…
EPSS: 0.000 (3.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.
Affected products
- Offis Dcmtk
- N/a Dcmtk — versions 3.6.0, 3.6.1, 3.6.2
Weakness classification (CWE)
References
- VDB-329029 | DCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereference (technical-description, Third Party Advisory, VDB Entry, vdb-entry)
- VDB-329029 | CTI Indicators (IOB, IOC, IOA) (signature, Permissions Required, permissions-required, VDB Entry)
- Submit #673134 | DCMTK GitHub Repository DCMTK 3.6.5 NULL Pointer Dereference (Third Party Advisory, VDB Entry, third-party-advisory)
- cna@vuldb.com (issue-tracking, Exploit, Issue Tracking, Vendor Advisory)
- cna@vuldb.com (Exploit, Third Party Advisory, exploit)
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2022-4981?
- CVE-2022-4981 is a low-severity vulnerability in Offis Dcmtk, classified under Improper Resource Shutdown or Release. CVSS score: 3.3/10. Published 2025-10-21.
- How severe is CVE-2022-4981?
- Low severity. CVSS v3 base score is 3.3 out of 10.