Offis Dicom Dcmtk Toolkit
5 CVEs affecting Offis Dicom Dcmtk Toolkit. Latest disclosed: 2026-06-30. Critical: 1, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-50003 | Critical | 9.8 | 2026-06-30 | A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode write files outside the chosen output directory, using both r… |
CVE-2026-52868 | High | 8.2 | 2026-06-30 | An unauthenticated attacker can read worklist records from a directory outside the intended per-AE worklist storage area. In a multi-area deployment, this can… |
CVE-2026-50254 | High | 7.5 | 2026-06-30 | An unauthenticated remote attacker can repeatedly send a single crafted connection request to leak memory. Against storescp in its default single-process mode… |
CVE-2026-35505 | High | 7.5 | 2026-06-30 | An unauthenticated remote attacker can repeatedly send crafted connection requests to leak memory. In single-process deployments the memory grows until the ser… |
CVE-2026-44628 | High | 7.5 | 2026-06-30 | An unauthenticated attacker can crash the worklist server with a single crafted query when the server has a valid Called AE Title / storage directory, the expe… |