CVE-2026-101021

CVE-2026-101021 · J4Care dcm4che Inefficient Algorithmic Complexity

This page contains facts from public vulnerability sources. Check the original advisory before updating.

MultipartInputStream performs inefficient boundary matching and unnecessary buffer copying. Crafted multipart input can force excessive boundary comparisons and repeated copying.

CVSS 8.7 · High · EPSS 0.3%

Published: 2026-10-16T14:28:54.992Z
Updated: 2026-10-16T15:20:18.725Z

Affected products and versions

dcm4chee-arc-light
Versions
- 5.35.1: Affected
- 5.35.2: Not affected
No fix published

Original sources

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-288-02
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-288-02.json
https://nvd.nist.gov/vuln/detail/CVE-2026-101021

Check your server →

CVE-2026-101021 · J4Care dcm4che Inefficient Algorithmic Complexity

Affected products and versions

dcm4chee-arc-light

Original sources