Direct Vulnerabilities

Known vulnerabilities in the dcmtk package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
CVE-2026-44038

*
  • L
CVE-2026-44037

*
  • L
CVE-2026-44036

*
  • L
CVE-2026-44035

*
  • L
CVE-2026-44034

*
  • L
CVE-2026-44033

*
  • L
CVE-2026-44031

*
  • H
Out-of-bounds Read

*
  • C
Out-of-bounds Write

<3.6.4-1
  • L
Directory Traversal

<3.6.9-5+deb13u3
  • L
Memory Leak

<3.6.9-5+deb13u3
  • L
Directory Traversal

<3.6.9-5+deb13u3
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

<3.6.9-5+deb13u3
  • L
Memory Leak

<3.6.9-5+deb13u3
  • M
Out-of-Bounds

<3.6.7-9~deb12u4
  • M
Out-of-Bounds

<3.6.7-9~deb12u4
  • L
CVE-2025-25475

<3.6.7-9~deb12u3
  • L
CVE-2025-25474

<3.6.7-9~deb12u3
  • L
CVE-2025-25472

<3.6.7-9~deb12u3
  • L
Improper Resource Shutdown or Release

<3.6.7-9~deb12u4
  • M
Out-of-Bounds

<3.6.7-9~deb12u4
  • H
Out-of-Bounds

<3.6.7-9~deb12u2
  • H
Out-of-Bounds

<3.6.7-9~deb12u2
  • L
CVE-2024-34509

<3.6.7-9~deb12u2
  • L
CVE-2024-34508

<3.6.7-9~deb12u2
  • H
Incorrect Type Conversion or Cast

<3.6.7-9~deb12u3
  • L
CVE-2024-27628

<3.6.7-9~deb12u2
  • H
Memory Leak

<3.6.7-8
  • H
Memory Leak

<3.6.7-1
  • H
NULL Pointer Dereference

<3.6.7-1
  • H
Double Free

<3.6.7-1
  • H
Memory Leak

<3.6.7-1
  • M
Out-of-Bounds

<3.6.6-1
  • C
Arbitrary Command Injection

<3.6.7-9~deb12u4
  • H
Out-of-bounds Write

<3.6.7-9~deb12u4
  • M
Out-of-Bounds

<3.6.7-9~deb12u4
  • M
Improper Resource Shutdown or Release

<3.6.7-9~deb12u4
  • M
NULL Pointer Dereference

<3.6.7-1
  • C
Directory Traversal

<3.6.7-6
  • C
Directory Traversal

<3.6.7-6
  • H
Out-of-Bounds

<3.6.1~20160216-2
  • H
Access Restriction Bypass

<3.6.1~20150629-1