Vulnerabilidades em OFFIS
19 resultadosAnálise Vexday
A OFFIS possui 11 CVEs catalogadas, nenhuma com evidência de ataque ativo em campo e sem críticas na base Vexday. Duas vulnerabilidades foram publicadas nos últimos 90 dias, indicando atividade recente de descoberta. A fraqueza dominante é imprópria restrição de operações dentro dos limites de buffer de memória (CWE-119), padrão típico em software legado, sugerindo risco moderado concentrado em componentes específicos.
CVE-2022-2119HIGHOFFIS DCMTK Path TraversalEPSS 3.4%CVE-2022-2120HIGHOFFIS DCMTK Path TraversalEPSS 3.4%CVE-2026-5663MEDIUMOFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injectionEPSS 2.0%CVE-2024-28130HIGHAn incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8. A speciaEPSS 1.7%CVE-2022-2121HIGHOFFIS DCMTK NULL Pointer DereferenceEPSS 0.8%CVE-2024-52333HIGHAn improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOMEPSS 0.6%CVE-2024-47796HIGHAn improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file cEPSS 0.6%CVE-2026-12805MEDIUMOFFIS DCMTK ofxml.cc parseFile heap-based overflowEPSS 0.5%CVE-2026-44031HIGHUncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of serviceEPSS 0.4%CVE-2026-97059HIGHDCMTK through 3.7.0 Heap Over-read via NumberOfFramesEPSS 0.3%CVE-2025-14607MEDIUMOFFIS DCMTK dcmdata dcbytstr.cc makeDicomByteString memory corruptionEPSS 0.3%CVE-2026-10194MEDIUMOFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflowEPSS 0.2%CVE-2025-14841MEDIUMOFFIS DCMTK dcmqrscp dcmqrdbi.cc startMoveRequest null pointer dereferenceEPSS 0.1%CVE-2026-44038MEDIUMGlobal buffer out-of-bounds read in DCMTK JPEG Huffman decodingEPSS 0.1%CVE-2026-44034MEDIUMHeap out-of-bounds read in DCMTK RLE decodeFrame()EPSS 0.1%CVE-2026-44035MEDIUMUncontrolled recursion in DCMTK DICOMDIR parsing allows denial of serviceEPSS 0.1%CVE-2026-44036MEDIUMUncontrolled recursion in DCMTK xml2dcm allows denial of serviceEPSS 0.1%CVE-2026-44037MEDIUMUncontrolled recursion in DCMTK JSON reader allows denial of serviceEPSS 0.1%CVE-2026-44033MEDIUMUncontrolled recursion in the DCMTK bundled XML parser allows denial of serviceEPSS 0.1%