OFFIS DCMTK and DICOM Projects

2026-07-20

09:14 DCMTK Bug #1250 (Closed): Out-of-bounds read in JPEG-LS decoder (decodingTables index)

Fixed with commit 4ac1337eafea4f8471c82e25f0ab4a3d1565bb7a. Michael Onken

09:05 DCMTK Bug #1250 (Closed): Out-of-bounds read in JPEG-LS decoder (decodingTables index)

As reported by Samuel Paschuan (4nt1, xmartlab):
Out-of-bounds read in the DCMTK JPEG-LS decoder. A crafted JPEG-L... Michael Onken

2026-07-17

20:29 DCMTK Feature #1249 (Closed): img2dcm: add --keep-app option to keep individual APPn markers

Fixed with commit e27c24b7fd17d1ca27eb54d0b27c6d5f53cf0f0c. Michael Onken

19:51 DCMTK Feature #1249 (Closed): img2dcm: add --keep-app option to keep individual APPn markers

Based on a suggestion by Mathieu Malaterre on the opentile issue tracker to make it possible to keep the Adobe APP14 ... Michael Onken

2026-07-15

10:15 DCMTK Bug #1248 (Closed): Remote memory leak in N-GET-RQ AttributeIdentifierList handling

Fixed with commit bcf5a99aa1f2e68684ff1cf0c63d2960df7664a5. Michael Onken

2026-07-14

20:58 DCMTK Bug #1248 (Closed): Remote memory leak in N-GET-RQ AttributeIdentifierList handling

As reported by Eneshan Erdoğan Karaca (BoxStrike Team):
h2. Summary
A remote, unauthenticated memory leak exist... Michael Onken

2026-07-06

20:31 DCMTK Bug #1242: Out-of-bounds read decoding 3-component JPEG-LS images

Fixed with commit 4c84db4702249593d2fb7f9bc3c90bc7185ababb. Michael Onken

20:31 DCMTK Bug #1241: Double free of palette color LUT

Fixed with commit 99bae4afd570be5f8167dc1d5f48932c00e7346e. Michael Onken

20:30 DCMTK Bug #1240: Heap buffer overflow in multi-frame overlay conversion.

Fixed with commit d0a6f8afaecc676dfc8e36a0ee1a729455a7f74f. Michael Onken

20:29 DCMTK Bug #1239: Out of bounds access into Lookup Table on big endian machines

Fixed with commit 87cccaa50770a00169cf59ec18c63d42175a8d1d. Michael Onken