PT-2025-42892
CVE-2020-36855
·
Published
2025-10-21
·
Updated
2025-11-03
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
DCMTK versions up to 3.6.5
Description
A security issue exists in DCMTK related to the
parseQuota function within the dcmqrscp component. Manipulation of the StorageQuota argument can lead to a stack-based buffer overflow. Local access is required for exploitation, and the exploit has been publicly disclosed.Recommendations
Upgrade to version 3.6.6 or later to address this issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾