Activity

Marco Eichelberg's activity

From 2026-05-21 to 2026-06-19

16:39 DCMTK Bug #1226 (Closed): Unbound recursion in DSRDocumentTreeNode::readXML(): Marco Eichelberg
10:29 DCMTK Bug #1082 (Closed): Possible memory leak in DcmDataset copy constructor: Marco Eichelberg

18:20 DCMTK Bug #1221: Out-of-bounds read in bundled IJG JPEG Huffman decoder: This issue was also reported on 2026-05-19 by Arjun Basnet, Senior Security Researcher, Securin. It has been register... Marco Eichelberg
17:53 DCMTK Bug #1226: Unbound recursion in DSRDocumentTreeNode::readXML(): Closed by commit #9057782f9.
Marco Eichelberg
17:51 DCMTK Bug #1226 (Closed): Unbound recursion in DSRDocumentTreeNode::readXML(): Currently, the XML to DICOM SR parser relies on a depth gate in libxml2 to prevent unbound recursion when reading a m... Marco Eichelberg
17:46 DCMTK Bug #1224 (Closed): xml2dcm parseDataSet / parseSequence mutual recursion: Marco Eichelberg
16:52 DCMTK Bug #1225 (Closed): json2dcm readValue JSON SQ unbounded recursion: Closed by commit #cf955e64c. Marco Eichelberg

18:25 DCMTK Bug #1225: json2dcm readValue JSON SQ unbounded recursion: Reported 2026-05-19 by Arjun Basnet, Senior Security Researcher, Securin. Marco Eichelberg
18:24 DCMTK Bug #1225: json2dcm readValue JSON SQ unbounded recursion: This issue has been registered as CVE-2026-44037. Marco Eichelberg
18:24 DCMTK Bug #1225 (Closed): json2dcm readValue JSON SQ unbounded recursion: @DcmJsonReaderBase::readValue()@ recurses via @DcmJsonReaderBase::parseSequence()@ on SQ JSON value items with no dep... Marco Eichelberg
18:15 DCMTK Bug #1224: xml2dcm parseDataSet / parseSequence mutual recursion: Closed by commit #87f256d73.
Marco Eichelberg
18:12 DCMTK Bug #1224 (Closed): xml2dcm parseDataSet / parseSequence mutual recursion: @DcmXMLParseHelper::parseDataSet()@ at xml2dcm.cc:618 calls @parseSequence()@ for every @<sequence>@ element. @parseS... Marco Eichelberg

18:32 DCMTK Bug #1205 (Closed): Building of a single shared library fails: Closed by commit #37bbe0f81. Marco Eichelberg
11:08 DCMTK Feature #1220 (New): Use of DcmDate/Time/DateTime instead of OFDate/Time/DateTime: In various places in DCMTK the classes OFDate/Time/DateTime are used to retrieve the current data or time in DICOM fo... Marco Eichelberg

11:28 DCMTK Bug #1219 (Closed): Inconsistent handling of uncompressed icon images: Closed by commit #d526cbb08.
Marco Eichelberg
08:28 DCMTK Bug #1219 (Closed): Inconsistent handling of uncompressed icon images: When loading a compressed DICOM image file that contains an Icon Image Sequence with uncompressed pixel data (which i... Marco Eichelberg

12:21 DCMTK Bug #1212 (Closed): NULL dereference in json2dcm: Marco Eichelberg
12:02 DCMTK Bug #1213: RLE decodeFrame() Heap-OOB Read: This issue has been registered as CVE-2026-44034. Marco Eichelberg
12:01 DCMTK Bug #1214: Unbounded recursion in XMLParser library: This issue has been registered as CVE-2026-44033. Marco Eichelberg
12:01 DCMTK Bug #1191: Stack Overflow via Deeply Nested DICOM Sequences: This issue has been registered as CVE-2026-44031. Marco Eichelberg
12:00 DCMTK Bug #1194: OS command injection vulnerability in storescp --exec-on-reception: This issue has been registered as CVE-2026-44030. Marco Eichelberg
11:56 DCMTK Bug #1215 (Closed): Unbounded recursion in DcmDicomDir::moveRecordToTree(): Fixed by commit #ca761f7f3.
This issue has been registered as CVE-2026-44035. Marco Eichelberg

19:41 DCMTK Bug #1215 (Closed): Unbounded recursion in DcmDicomDir::moveRecordToTree(): The method @DcmDicomDir::moveRecordToTree()@ (@dcmdata/libsrc/dcdicdir.cc@) recurses on each child directory record w... Marco Eichelberg
19:22 DCMTK Bug #1214 (Closed): Unbounded recursion in XMLParser library: Closed by commit #d12e350e6.
Marco Eichelberg
19:19 DCMTK Bug #1214 (Closed): Unbounded recursion in XMLParser library: The methods @XMLNode::ParseXMLElement()@ and @XMLNode::emptyTheNode()@ in @ofstd/libsrc/ofxml.cc@ recurse on the stac... Marco Eichelberg

18:05 DCMTK Bug #1213 (Closed): RLE decodeFrame() Heap-OOB Read: Closed by commit #45469f3c3.
Marco Eichelberg
18:02 DCMTK Bug #1213 (Closed): RLE decodeFrame() Heap-OOB Read: @DcmRLECodecDecoder::decodeFrame()@ (dcmdata/libsrc/dcrleccd.cc:583) calls @memcpy(rleHeader, rleData, 64)@ without v... Marco Eichelberg
17:08 DCMTK Bug #1208 (Closed): Heap Buffer Overflow in XMLNode::parseFile() - ofxml.cc: Closed by commit #1d4b3815c.
Marco Eichelberg

09:30 DCMTK Feature #1146 (Closed): Add character set options to dcm2json: Marco Eichelberg

17:33 DCMTK Feature #1146: Add character set options to dcm2json: Closed by commit #4f8b940ae. Marco Eichelberg
15:15 DCMTK Bug #1212: NULL dereference in json2dcm: Closed by commit #0748c6e28.
Marco Eichelberg
15:12 DCMTK Bug #1212 (Closed): NULL dereference in json2dcm: @DcmJSONReader::createElement()@ will de-reference a NULL pointer if a call to @DcmItem::newDicomElementWithVR()@ fai... Marco Eichelberg
14:44 DCMTK Bug #1211 (Closed): Heap-buffer-overflow in I2DBmpSource::parse24_32BppRow(): Closed by commit #68b57d3cf. Marco Eichelberg
14:37 DCMTK Bug #1211 (Closed): Heap-buffer-overflow in I2DBmpSource::parse24_32BppRow(): An invalid BMP file with 16, 24 or 32 bit per pixel that contains a color palette (which is not permitted for these i... Marco Eichelberg

Also available in: Atom