Direct Vulnerabilities

Known vulnerabilities in the dcmtk package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
CVE-2026-44036

*
  • L
CVE-2026-44033

*
  • L
CVE-2026-44035

*
  • L
CVE-2026-44031

*
  • L
CVE-2026-44037

*
  • L
CVE-2026-44034

*
  • L
CVE-2026-44038

*
  • H
Out-of-bounds Read

*
  • L
Directory Traversal

<3.7.0+really3.7.0-7
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

<3.7.0+really3.7.0-7
  • L
Memory Leak

<3.7.0+really3.7.0-7
  • L
Memory Leak

<3.7.0+really3.7.0-7
  • L
Directory Traversal

<3.7.0+really3.7.0-7
  • M
Out-of-Bounds

<3.7.0+really3.7.0-6
  • M
Out-of-Bounds

<3.7.0+really3.7.0-5
  • C
Arbitrary Command Injection

<3.7.0+really3.7.0-3
  • L
Improper Resource Shutdown or Release

<3.7.0+really3.7.0-1
  • M
Out-of-Bounds

<3.7.0+really3.7.0-1
  • M
Improper Resource Shutdown or Release

<3.6.8-5
  • M
Out-of-Bounds

<3.6.6-1
  • H
Out-of-bounds Write

<3.6.9-6
  • H
Memory Leak

<3.6.7-1
  • H
Out-of-Bounds

<3.6.8-7
  • C
Directory Traversal

<3.6.7-6
  • H
Memory Leak

<3.6.7-1
  • H
Out-of-Bounds

<3.6.8-7
  • H
Memory Leak

<3.6.7-8
  • H
Double Free

<3.6.7-1
  • L
CVE-2024-34509

<3.6.7-14
  • M
Out-of-Bounds

<3.6.9-5
  • L
CVE-2024-34508

<3.6.7-14
  • L
CVE-2025-25474

<3.6.9-4
  • H
Out-of-Bounds

<3.6.1~20160216-2
  • L
Access Restriction Bypass

<3.6.1~20150629-1
  • H
NULL Pointer Dereference

<3.6.7-1
  • H
Incorrect Type Conversion or Cast

<3.6.7-14
  • L
Out-of-Bounds

<3.6.4-1
  • L
CVE-2024-27628

<3.6.8-6
  • L
CVE-2025-25475

<3.6.9-4
  • L
CVE-2025-25472

<3.6.9-4
  • M
NULL Pointer Dereference

<3.6.7-1
  • C
Directory Traversal

<3.6.7-6