Project

General

Profile

Activity

From 2026-05-09 to 2026-06-07

2026-06-05

18:32 DCMTK Bug #1205 (Closed): Building of a single shared library fails
Closed by commit #37bbe0f81. Marco Eichelberg
11:08 DCMTK Feature #1220 (New): Use of DcmDate/Time/DateTime instead of OFDate/Time/DateTime
In various places in DCMTK the classes OFDate/Time/DateTime are used to retrieve the current data or time in DICOM fo... Marco Eichelberg

2026-05-31

11:28 DCMTK Bug #1219 (Closed): Inconsistent handling of uncompressed icon images
Closed by commit #d526cbb08.
Marco Eichelberg
08:28 DCMTK Bug #1219 (Closed): Inconsistent handling of uncompressed icon images
When loading a compressed DICOM image file that contains an Icon Image Sequence with uncompressed pixel data (which i... Marco Eichelberg

2026-05-29

18:06 DCMTK Bug #1217 (Closed): AE_6/AE_3 error-return paths skip heap cleanup
Michael Onken
18:06 DCMTK Bug #1217: AE_6/AE_3 error-return paths skip heap cleanup
A second leak was discovered during fixing the orginally reported one.
translatePresentationContextList() also now...
Michael Onken
14:40 DCMTK Bug #1218: wlmscpfs unchecked DcmElement* to DcmSequenceOfItems* cast
Bug reported by Abhinav Agarwal. Michael Onken
14:31 DCMTK Bug #1218 (Closed): wlmscpfs unchecked DcmElement* to DcmSequenceOfItems* cast
Michael Onken
14:29 DCMTK Bug #1218: wlmscpfs unchecked DcmElement* to DcmSequenceOfItems* cast
Fixed in commit f4e007468. Michael Onken
14:25 DCMTK Bug #1216 (Closed): destroyUserInformationLists() leaks ExtNeg sub-items
Fixed with commit 23f181. Michael Onken

2026-05-27

09:34 DCMTK Bug #1218 (Closed): wlmscpfs unchecked DcmElement* to DcmSequenceOfItems* cast
Root cause: wldsfs.cc has 3 functions with unchecked C-style casts of findAndGetElement() results to DcmSequenceOfIte... Michael Onken
09:33 DCMTK Bug #1217 (Closed): AE_6/AE_3 error-return paths skip heap cleanup
Bug as reported by Abhinav Agarwal:
Root cause: AE_6_ExamineAssociateRequest (dulfsm.cc:1231): after parseAssociat...
Michael Onken
09:32 DCMTK Bug #1216 (Closed): destroyUserInformationLists() leaks ExtNeg sub-items
Bug as reported by Abhinav Agarwal:
Root cause: helpers.cc:67 does `delete userInfo->extNegList` which frees the O...
Michael Onken

2026-05-26

09:38 DCMTK Bug #1209 (Closed): Low severity short read in DcmMetaInfo::nextTagIsMeta()
Jörg Riesmeier
09:38 DCMTK Bug #1209: Low severity short read in DcmMetaInfo::nextTagIsMeta()
Fixed with commit e267be7ff. Jörg Riesmeier

2026-05-25

12:21 DCMTK Bug #1212 (Closed): NULL dereference in json2dcm
Marco Eichelberg
12:02 DCMTK Bug #1213: RLE decodeFrame() Heap-OOB Read
This issue has been registered as CVE-2026-44034. Marco Eichelberg
12:01 DCMTK Bug #1214: Unbounded recursion in XMLParser library
This issue has been registered as CVE-2026-44033. Marco Eichelberg
12:01 DCMTK Bug #1191: Stack Overflow via Deeply Nested DICOM Sequences
This issue has been registered as CVE-2026-44031. Marco Eichelberg
12:00 DCMTK Bug #1194: OS command injection vulnerability in storescp --exec-on-reception
This issue has been registered as CVE-2026-44030. Marco Eichelberg

2026-05-24

19:22 DCMTK Bug #1214 (Closed): Unbounded recursion in XMLParser library
Closed by commit #d12e350e6.
Marco Eichelberg
19:19 DCMTK Bug #1214 (Closed): Unbounded recursion in XMLParser library
The methods @XMLNode::ParseXMLElement()@ and @XMLNode::emptyTheNode()@ in @ofstd/libsrc/ofxml.cc@ recurse on the stac... Marco Eichelberg

2026-05-23

18:05 DCMTK Bug #1213 (Closed): RLE decodeFrame() Heap-OOB Read
Closed by commit #45469f3c3.
Marco Eichelberg
18:02 DCMTK Bug #1213 (Closed): RLE decodeFrame() Heap-OOB Read
@DcmRLECodecDecoder::decodeFrame()@ (dcmdata/libsrc/dcrleccd.cc:583) calls @memcpy(rleHeader, rleData, 64)@ without v... Marco Eichelberg

2026-05-22

09:30 DCMTK Feature #1146 (Closed): Add character set options to dcm2json
Marco Eichelberg

2026-05-21

17:33 DCMTK Feature #1146: Add character set options to dcm2json
Closed by commit #4f8b940ae. Marco Eichelberg
15:15 DCMTK Bug #1212: NULL dereference in json2dcm
Closed by commit #0748c6e28.
Marco Eichelberg
15:12 DCMTK Bug #1212 (Closed): NULL dereference in json2dcm
@DcmJSONReader::createElement()@ will de-reference a NULL pointer if a call to @DcmItem::newDicomElementWithVR()@ fai... Marco Eichelberg
14:44 DCMTK Bug #1211 (Closed): Heap-buffer-overflow in I2DBmpSource::parse24_32BppRow()
Closed by commit #68b57d3cf. Marco Eichelberg
14:37 DCMTK Bug #1211 (Closed): Heap-buffer-overflow in I2DBmpSource::parse24_32BppRow()
An invalid BMP file with 16, 24 or 32 bit per pixel that contains a color palette (which is not permitted for these i... Marco Eichelberg

2026-05-19

09:21 DCMTK Bug #1209 (Closed): Low severity short read in DcmMetaInfo::nextTagIsMeta()
On 2026-05-17, Jiami (DMSAN) reported the following:
_=== CUT ===_
Dear DCMTK maintainers,
I found a use of ...
Jörg Riesmeier

2026-05-12

15:12 DCMTK Feature #1202 (Closed): Remove C++98 support and enable STL by default
Closed by commit #7354a5bdf.
Marco Eichelberg
 

Also available in: Atom