[ Vendor · 8 CVEs ]
OFFIS
CVEs affecting OFFIS published in the last 30 days, plus any OFFIS CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-44031 | 8 Oct 2026 | CVSS 7.5 | OFFIS DCMTKUncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read() in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated… | |
| CVE-2026-44033 | 8 Oct 2026 | CVSS 5.5 | OFFIS DCMTKUncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc/ofxml.cc) of OFFIS DCMTK… | |
| CVE-2026-44034 | 8 Oct 2026 | CVSS 4.4 | OFFIS DCMTKA heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame() in dcmdata/libsrc/dcrleccd.cc of OFFIS DCMTK 3.7.0 allows an attacker to read up… | |
| CVE-2026-44035 | 8 Oct 2026 | CVSS 5.5 | OFFIS DCMTKUncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of… | |
| CVE-2026-44036 | 8 Oct 2026 | CVSS 5.5 | OFFIS DCMTKUncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter… | |
| CVE-2026-44037 | 8 Oct 2026 | CVSS 5.5 | OFFIS DCMTKUncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in… | |
| CVE-2026-44038 | 8 Oct 2026 | CVSS 4.4 | OFFIS DCMTKA global out-of-bounds read in the Huffman decoder of the bundled IJG JPEG libraries (dcmjpeg/libijg8, libijg12 and libijg16) of OFFIS DCMTK 3.7.0… | |
| CVE-2026-97059 | 24 Sep 2026 | CVSS 8.2 | OFFIS DCMTKDCMTK through 3.7.0 contains a heap over-read vulnerability in ConcatenationLoader that copies pixel data frames without validating the PixelData… |