OFFIS · weakness class
Denial of Service
8 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.
- DCMTK through 3.6.6 does not handle memory free properly. The malloced memory for storing all file information are recorded in a global variable LST and are not freed properly. Se…
- DCMTK through 3.6.6 does not handle memory free properly. The program malloc a heap memory for parsing data, but does not free it when error in parsing. Sending specific requests…
- DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object.
- Uncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of service
- Uncontrolled recursion in DCMTK JSON reader allows denial of service
- Uncontrolled recursion in DCMTK xml2dcm allows denial of service
- Uncontrolled recursion in DCMTK DICOMDIR parsing allows denial of service
- Uncontrolled recursion in the DCMTK bundled XML parser allows denial of service
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.