CVE-2026-44038: falha de média gravidade em OFFIS DCMTK
Global buffer out-of-bounds read in DCMTK JPEG Huffman decoding
Publicada em
10Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.8
probabilidade de exploração
—
exploração observada
nãonenhuma fonte reporta
A global out-of-bounds read in the Huffman decoder of the bundled IJG JPEG libraries (dcmjpeg/libijg8, libijg12 and libijg16) of OFFIS DCMTK 3.7.0 allows an attacker to read memory beyond the extend_test[] and extend_offset[] tables, causing incorrectly decoded pixel data or a crash, via a DICOM file with a crafted JPEG stream whose Huffman table defines a difference category above 15. Huffman symbol values are not range-checked unless DCMTK is built with DCMTK_ENABLE_STRICT_HUFFMAN_TABLE_CHECK, which is disabled by default. dcmdjpeg and any application that decompresses JPEG DICOM images with DCMTK are affected. The issue is fixed in commit d6ae1bc8d5b9ae9c7300013c8c85cc2ea0fd8cf5.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
Produtos afetados
OFFIS · DCMTKCVEs relacionadas — OFFIS DCMTK
No mesmo produto, das mais perigosas para as menos.
CVE-2022-2119HIGHOFFIS DCMTK Path TraversalEPSS 3.3%CVE-2022-2120HIGHOFFIS DCMTK Path TraversalEPSS 3.3%CVE-2026-5663MEDIUMOFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injectionEPSS 2.8%CVE-2024-28130HIGHCVE-2024-28130EPSS 1.7%CVE-2022-2121HIGHOFFIS DCMTK NULL Pointer DereferenceEPSS 0.8%CVE-2024-52333HIGHCVE-2024-52333EPSS 0.6%