DCMTK

2026-03-29

14:51 Bug #1198 (Closed): Path Traversal in JSON Bulkdata Loading

Closed by commit #969c4b6f2.
Marco Eichelberg

10:05 Bug #1197 (Closed): Uninitialized Memory Read in JSMN Token Array

Closed by commit #ae94a3d75.
Marco Eichelberg

09:03 Bug #1196 (Closed): SEGV via OOB Read in DcmJSONReader getTokenContent

Closed by commit #4add0621b (i.e. the same commit that also closed DCMTK issue #1193.) Marco Eichelberg

2026-03-28

20:08 Bug #1195 (Closed): Heap OOB Read via PersonName Path in DcmJSONReader

Closed by commit #4add0621b (i.e. the same commit that also closed DCMTK issue #1193.) Marco Eichelberg

18:22 Bug #1193 (Closed): Heap OOB Read in DcmJSONReader getTokenContent

Closed by commit #4add0621b.
Marco Eichelberg

2026-03-25

10:14 Bug #1198 (Closed): Path Traversal in JSON Bulkdata Loading

Received by email from the IN-CYPHER OSS Security Team (2026-03-24):
> *Subject:* IC-DCMTK-0024: Path Traversal in... Jörg Riesmeier

10:11 Bug #1197 (Closed): Uninitialized Memory Read in JSMN Token Array

Received by email from the IN-CYPHER OSS Security Team (2026-03-24):
> *Subject:* IC-DCMTK-0009 Uninitialized Memo... Jörg Riesmeier

10:09 Bug #1196 (Closed): SEGV via OOB Read in DcmJSONReader getTokenContent

Received by email from the IN-CYPHER OSS Security Team (2026-03-24):
> *Subject:* IC-DCMTK-0008 SEGV via OOB Read ... Jörg Riesmeier

10:06 Bug #1195 (Closed): Heap OOB Read via PersonName Path in DcmJSONReader

Received by email from the IN-CYPHER OSS Security Team (2026-03-24):
> *Subject:* IC-DCMTK-0007 Heap OOB Read via ... Jörg Riesmeier

2026-03-10

23:46 Bug #1193 (Closed): Heap OOB Read in DcmJSONReader getTokenContent

Received by email from the IN-CYPHER OSS Security Team (2026-03-09):
> *Subject:* IC-DCMTK-0006 Heap OOB Read in D... Jörg Riesmeier

23:43 Bug #1190 (Closed): Infinite Loop in JPEG Segment Parser TEM Marker

Closed by commit "a2fef890f":https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=a2fef890fb4cb2e8aac137db54bd514b8a778474. Jörg Riesmeier

19:21 Bug #1190 (Closed): Infinite Loop in JPEG Segment Parser TEM Marker

Received by email from the IN-CYPHER OSS Security Team (2026-03-09):
> *Subject:* IC-DCMTK-0004 Infinite Loop in J... Jörg Riesmeier

2026-03-09

16:56 Bug #1189 (Closed): Double-Free in DcmJSONReader via decodeBase64()

Closed by commit "28e3a0031":https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=28e3a00312dc3576a3accc63df957bf89a3149e3. Jörg Riesmeier

16:55 Bug #1189 (Closed): Double-Free in DcmJSONReader via decodeBase64()

Received by email from the IN-CYPHER OSS Security Team (2026-03-09):
> *Subject:* IC-DCMTK-0002: Double-Free in Dc... Jörg Riesmeier

2026-03-02

17:13 Feature #1128 (Closed): dcmsr should support the fractional part of a second in its own XML format

See commit 63e6fb804 (and following). Jörg Riesmeier