Skip to content
OpenAdvisories
Medium DLA-4363-1 3 CVEs

dcmtk - security update

Published Nov 3, 2025 · Updated Nov 3, 2025

Fixed packages 1

ReleasePackageFixed in
Debian · 11 dcmtk 3.6.5-1+deb11u5

Vulnerabilities 3

  • Medium 5.3

    DCMTK dcmqrscp parseQuota stack-based overflow

    A security vulnerability has been detected in DCMTK up to 3.6.5. The affected element is the function parseQuota of the component dcmqrscp. The manipulation of the argument StorageQuota leads to stack-based buffer overflow. Local access is required to approac…

  • Medium 5.3

    DCMTK dcm2img diybrpxt.h memory corruption

    A vulnerability was identified in DCMTK up to 3.6.9. This affects an unknown function in the library dcmimage/include/dcmtk/dcmimage/diybrpxt.h of the component dcm2img. Such manipulation leads to memory corruption. Local access is required to approach this a…

  • Low 3.3

    DCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereference

    A vulnerability was detected in DCMTK up to 3.6.7. The impacted element is the function DcmQueryRetrieveConfig::readPeerList of the file /dcmqrcnf.cc of the component dcmqrscp. The manipulation results in null pointer dereference. The attack needs to be appro…