Description
The qrscp application's C-STORE handler uses a specific instance from attacker-supplied DICOM datasets directly in os.path.join() without sanitization, allowing file writes to arbitrary paths.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| pydicom | pynetdicom Library | 1.0.0 – ≤ 3.0.4 | — |
Advisories 1
- ICSMA-26-176-01 pydicom pynetdicom Library CISA ICS & IT advisories · Jun 25, 2026