Project

General

Profile

Actions
Copy link

Bug #1212

closed

NULL dereference in json2dcm

Added by Marco Eichelberg 5 days ago. Updated about 16 hours ago.

Status:
Closed
Priority:
Normal
Assignee:
Marco Eichelberg
Category:
Library and Apps
Target version:
-
Start date:
2026-05-21
Due date:
% Done:

100%

Estimated time:
1:00 h
Module:
dcmdata
Operating System:
Compiler:

Description

DcmJSONReader::createElement() will de-reference a NULL pointer if a call to DcmItem::newDicomElementWithVR() fails because of incorrect error handling.

The bug can be reproduced by compiling DCMTK with -fsanitize=address,undefined and then calling

json2dcm ub-jsonrd-pixeldata-null.json out.dcm

Reported 2026-05-04 by Kaixuan.

Files

ub-jsonrd-pixeldata-null.json (101 Bytes) ub-jsonrd-pixeldata-null.json PoC file Marco Eichelberg, 2026-05-21 15:12
Actions
Copy link

Also available in: Atom PDF