DCMTK

2026-05-25

12:21 Bug #1212 (Closed): NULL dereference in json2dcm

Marco Eichelberg

12:15 Bug #1210 (Closed): wlmscpfs Called AE Title used as directory path unsanitized

Marco Eichelberg

12:02 Bug #1213: RLE decodeFrame() Heap-OOB Read

This issue has been registered as CVE-2026-44034. Marco Eichelberg

12:01 Bug #1214: Unbounded recursion in XMLParser library

This issue has been registered as CVE-2026-44033. Marco Eichelberg

12:01 Bug #1191: Stack Overflow via Deeply Nested DICOM Sequences

This issue has been registered as CVE-2026-44031. Marco Eichelberg

12:00 Bug #1194: OS command injection vulnerability in storescp --exec-on-reception

This issue has been registered as CVE-2026-44030. Marco Eichelberg

2026-05-24

19:22 Bug #1214 (Closed): Unbounded recursion in XMLParser library

Closed by commit #d12e350e6.
Marco Eichelberg

19:19 Bug #1214 (Closed): Unbounded recursion in XMLParser library

The methods @XMLNode::ParseXMLElement()@ and @XMLNode::emptyTheNode()@ in @ofstd/libsrc/ofxml.cc@ recurse on the stac... Marco Eichelberg