PT-2026-107944
CVE-2026-44035
·
Published
2026-10-08
·
Updated
2026-10-08
Description by
CVSS 4.0
6.8
MediumMetricsAV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
OFFIS DCMTK version 3.7.0
Description
Uncontrolled recursion in the
moveRecordToTree() function within dcmdata/libsrc/dcdicdir.cc can lead to a denial of service characterized by stack exhaustion and process crashes. This occurs when an attacker provides a specially crafted DICOMDIR file containing a deeply chained sequence of directory records linked via the Offset of Referenced Lower-Level Directory Entity attribute. Any application that opens the DICOMDIR, such as dcmgpdir or media viewers built on DCMTK, is susceptible to this issue.Recommendations
Apply the fix provided in commit ca761f7f3dcaaddaa95be87cf5d736138d7c3a9f for version 3.7.0.
Found an issue in the description? Have something to add? Feel free to write us 👾