Project

General

Profile

Actions
Copy link

Bug #1212

closed

NULL dereference in json2dcm

Added by Marco Eichelberg 5 days ago. Updated about 15 hours ago.

Status:
Closed
Priority:
Normal
Assignee:
Marco Eichelberg
Category:
Library and Apps
Target version:
-
Start date:
2026-05-21
Due date:
% Done:

100%

Estimated time:
1:00 h
Module:
dcmdata
Operating System:
Compiler:

Description

DcmJSONReader::createElement() will de-reference a NULL pointer if a call to DcmItem::newDicomElementWithVR() fails because of incorrect error handling.

The bug can be reproduced by compiling DCMTK with -fsanitize=address,undefined and then calling

json2dcm ub-jsonrd-pixeldata-null.json out.dcm

Reported 2026-05-04 by Kaixuan.

Files

ub-jsonrd-pixeldata-null.json (101 Bytes) ub-jsonrd-pixeldata-null.json PoC file Marco Eichelberg, 2026-05-21 15:12
Actions
Copy link
 #1

Updated by Marco Eichelberg 5 days ago

  • % Done changed from 0 to 100
  • Estimated time set to 1:00 h

Closed by commit #0748c6e28.

Actions
Copy link
 #2

Updated by Marco Eichelberg about 15 hours ago

  • Private changed from Yes to No
Actions
Copy link
 #3

Updated by Marco Eichelberg about 15 hours ago

  • Private changed from No to Yes
Actions
Copy link
 #4

Updated by Marco Eichelberg about 15 hours ago

  • Status changed from New to Closed
  • Private changed from Yes to No
Actions
Copy link

Also available in: Atom PDF