Actions
Bug #1224
closed
xml2dcm parseDataSet / parseSequence mutual recursion
Start date:
2026-06-16
Due date:
% Done:
100%
Estimated time:
1:00 h
Module:
dcndata
Operating System:
Compiler:
Description
DcmXMLParseHelper::parseDataSet() at xml2dcm.cc:618 calls parseSequence() for every <sequence> element. parseSequence() at xml2dcm.cc:457 calls parseDataSet() for every `<item>` element. This mutual recursion has no depth limit. At 15,000 nested levels the default 8 MB stack is exhausted.
Reported 2026-05-19 by Arjun Basnet, Senior Security Researcher, Securin.
This issue has been registered as CVE-2026-44036.
Files
Updated by Marco Eichelberg 3 days ago
- % Done changed from 0 to 100
- Estimated time set to 1:00 h
- Private changed from No to Yes
Closed by commit #87f256d73.
Actions