Skip to content
OpenAdvisories
Medium DLA-4443-1 2 CVEs

dcmtk - security update

Published Jan 19, 2026 · Updated Jan 19, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 11 dcmtk 3.6.5-1+deb11u6

Vulnerabilities 2

  • Medium 6.3

    OFFIS DCMTK dcmdata dcbytstr.cc makeDicomByteString memory corruption

    A vulnerability was detected in OFFIS DCMTK up to 3.6.9. Affected by this issue is the function DcmByteString::makeDicomByteString of the file dcmdata/libsrc/dcbytstr.cc of the component dcmdata. The manipulation results in memory corruption. The attack can b…

  • Low 3.3

    OFFIS DCMTK dcmqrscp dcmqrdbi.cc startMoveRequest null pointer dereference

    A flaw has been found in OFFIS DCMTK up to 3.6.9. The impacted element is the function DcmQueryRetrieveIndexDatabaseHandle::startFindRequest/DcmQueryRetrieveIndexDatabaseHandle::startMoveRequest in the library dcmqrdb/libsrc/dcmqrdbi.cc of the component dcmqr…