Activity

From 2026-05-31 to 2026-06-29

16:39 Bug #1226 (Closed): Unbound recursion in DSRDocumentTreeNode::readXML(): Marco Eichelberg
10:29 Bug #1082 (Closed): Possible memory leak in DcmDataset copy constructor: Marco Eichelberg

18:20 Bug #1221: Out-of-bounds read in bundled IJG JPEG Huffman decoder: This issue was also reported on 2026-05-19 by Arjun Basnet, Senior Security Researcher, Securin. It has been register... Marco Eichelberg
17:53 Bug #1226: Unbound recursion in DSRDocumentTreeNode::readXML(): Closed by commit #9057782f9.
Marco Eichelberg
17:51 Bug #1226 (Closed): Unbound recursion in DSRDocumentTreeNode::readXML(): Currently, the XML to DICOM SR parser relies on a depth gate in libxml2 to prevent unbound recursion when reading a m... Marco Eichelberg
17:46 Bug #1224 (Closed): xml2dcm parseDataSet / parseSequence mutual recursion: Marco Eichelberg
16:52 Bug #1225 (Closed): json2dcm readValue JSON SQ unbounded recursion: Closed by commit #cf955e64c. Marco Eichelberg

18:25 Bug #1225: json2dcm readValue JSON SQ unbounded recursion: Reported 2026-05-19 by Arjun Basnet, Senior Security Researcher, Securin. Marco Eichelberg
18:24 Bug #1225: json2dcm readValue JSON SQ unbounded recursion: This issue has been registered as CVE-2026-44037. Marco Eichelberg
18:24 Bug #1225 (Closed): json2dcm readValue JSON SQ unbounded recursion: @DcmJsonReaderBase::readValue()@ recurses via @DcmJsonReaderBase::parseSequence()@ on SQ JSON value items with no dep... Marco Eichelberg
18:15 Bug #1224: xml2dcm parseDataSet / parseSequence mutual recursion: Closed by commit #87f256d73.
Marco Eichelberg
18:12 Bug #1224 (Closed): xml2dcm parseDataSet / parseSequence mutual recursion: @DcmXMLParseHelper::parseDataSet()@ at xml2dcm.cc:618 calls @parseSequence()@ for every @<sequence>@ element. @parseS... Marco Eichelberg

11:59 Bug #1221 (Closed): Out-of-bounds read in bundled IJG JPEG Huffman decoder: Michael Onken
11:59 Bug #1222 (Closed): Out-of-bounds read in CharLS JPEG-LS EndScan(): Michael Onken
11:59 Bug #1223 (Closed): Out-of-bounds read in CharLS JPEG-LS QuantizeGratient(): Michael Onken

07:40 Bug #1223: Out-of-bounds read in CharLS JPEG-LS QuantizeGratient(): Fixed with commit b6691c7a0fdfd261c20c2509c2ac16966bd37763 Michael Onken
07:40 Bug #1222: Out-of-bounds read in CharLS JPEG-LS EndScan(): Fixed with commit b818c19720bd3c5c273f7c0578fef3990333af22 Michael Onken
07:39 Bug #1221: Out-of-bounds read in bundled IJG JPEG Huffman decoder: Fixed with commit d6ae1bc8d5b9ae9c7300013c8c85cc2ea0fd8cf5. Michael Onken

11:16 Bug #1223 (Closed): Out-of-bounds read in CharLS JPEG-LS QuantizeGratient(): DCMTK's bundled CharLS JPEG-LS library (dcmjpls/libcharls) performs an out-of-bounds heap read in its near-lossless d... Michael Onken
11:15 Bug #1222 (Closed): Out-of-bounds read in CharLS JPEG-LS EndScan(): DCMTK's bundled CharLS JPEG-LS library (dcmjpls/libcharls) performs an out-of-bounds heap read when finishing decode ... Michael Onken
11:13 Bug #1221 (Closed): Out-of-bounds read in bundled IJG JPEG Huffman decoder: DCMTK's bundled IJG JPEG library (dcmjpeg/libijg8, and the identical libijg12/libijg16 copies) contains a Huffman-tab... Michael Onken