p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de gdcm

Vulnerabilidades publicadas para gdcm en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 5

  1. CVE-2026-3650

    Alta · CVSS 8.7EPSS 0,36%Sin corrección publicada

    Grassroots DICOM Missing release of memory after effective lifetime

    A memory leak exists in the Grassroots DICOM library (GDCM). The bug occurs when parsing malformed DICOM files with non-standard VR types in file meta information. The vulnerability leads to vast memory allocations and resource depletion, triggering a denial-of-service condition. A maliciously crafted file can fill the heap in a single read operation without properly releasing it.

    Publicación Actualización
  2. CVE-2025-53619

    Alta · CVSS 7.4EPSS 0,34%Sin corrección publicada

    CVE-2025-53619

    An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.The function `null_convert` is called based of the value of the malicious DICOM file specifying the intended interpretation of the image pixel data

    Publicación Actualización
  3. CVE-2025-53618

    Alta · CVSS 7.4EPSS 0,32%Sin corrección publicada

    CVE-2025-53618

    An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.The function `grayscale_convert` is called based of the value of the malicious DICOM file specifying the intended interpretation of the image pixel data

    Publicación Actualización
  4. CVE-2025-52582

    Alta · CVSS 7.4EPSS 0,41%Sin corrección publicada

    CVE-2025-52582

    An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.

    Publicación Actualización
  5. CVE-2025-48429

    Alta · CVSS 7.4EPSS 0,43%Sin corrección publicada

    CVE-2025-48429

    An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to leaking heap data. An attacker can provide a malicious file to trigger this vulnerability.

    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →