OFFIS records
24 published records for vendor offis.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 4
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer5
- CWE-476 NULL Pointer Dereference4
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3
- CWE-401 Missing Release of Memory after Effective Lifetime3
- CWE-404 Improper Resource Shutdown or Release1
- CWE-415 Double Free1
The weakness classes this vendor ships most often: where to look.
CWEAll records
24 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
41Plan | CVE-2019-1010228No exploit | OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow.offis · dcmtk · CWE-787 | Critical9.8 | — | 7.6% | Jul 22, 2019 |
40Plan | CVE-2022-2120No exploit | OFFIS DCMTK Path Traversaloffis · dcmtk · CWE-23 | Critical9.8 | — | 3.2% | Jun 24, 2022 |
40Plan | CVE-2022-2119No exploit | OFFIS DCMTK Path Traversaloffis · dcmtk · CWE-22 | Critical9.8 | — | 3.2% | Jun 24, 2022 |
32Monitor | CVE-2024-27628No exploit | Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component.offis · dcmtk · CWE-120 | High8.1 | — | 0.7% | Jun 28, 2024 |
31Monitor | CVE-2021-41689No exploit | DCMTK through 3.6.6 does not handle string copy properly.offis · dcmtk · CWE-476 | High7.5 | — | 2.0% | Jun 28, 2022 |
31Monitor | CVE-2021-41690No exploit | DCMTK through 3.6.6 does not handle memory free properly.offis · dcmtk · CWE-401 | High7.5 | — | 1.8% | Jun 28, 2022 |
31Monitor | CVE-2021-41687No exploit | DCMTK through 3.6.6 does not handle memory free properly.offis · dcmtk · CWE-401 | High7.5 | — | 1.8% | Jun 28, 2022 |
31Monitor | CVE-2021-41688No exploit | DCMTK through 3.6.6 does not handle memory free properly.offis · dcmtk · CWE-415 | High7.5 | — | 1.8% | Jun 28, 2022 |
31Monitor | CVE-2024-28130No exploit | An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8.offis · dcmtk · CWE-704 | High7.5 | — | 1.7% | Apr 23, 2024 |
31Monitor | CVE-2024-52333No exploit | An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8.offis · dcmtk · CWE-119 | High7.8 | — | 0.6% | Jan 13, 2025 |
31Monitor | CVE-2024-47796No exploit | An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8.offis · dcmtk · CWE-119 | High7.8 | — | 0.6% | Jan 13, 2025 |
30Monitor | CVE-2022-43272No exploit | DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object.offis · dcmtk · CWE-401 | High7.5 | — | 1.6% | Dec 2, 2022 |
30Monitor | CVE-2025-25475No exploit | A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) viaoffis · dcmtk · CWE-476 | High7.5 | — | 0.6% | Feb 18, 2025 |
28Monitor | CVE-2026-5663No exploit | OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injectionoffis · dcmtk · CWE-77 | Medium6.9 | — | 2.8% | Apr 6, 2026 |
28Monitor | CVE-2013-6825No exploit | (1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc/wlmactmg.cc, (5) dcmprscp.cc and (6) dcmpsrcoffis · dcmtk · CWE-264 | High7.2 | — | 0.5% | Jun 10, 2014 |
26Monitor | CVE-2022-2121No exploit | OFFIS DCMTK NULL Pointer Dereferenceoffis · dcmtk · CWE-476 | Medium6.5 | — | 0.8% | Jun 24, 2022 |
26Monitor | CVE-2025-25474No exploit | DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h.offis · dcmtk · CWE-120 | Medium6.5 | — | 0.4% | Feb 18, 2025 |
21Monitor | CVE-2024-34509No exploit | dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.offis · dcmtk | Medium5.3 | — | 0.7% | May 5, 2024 |
21Monitor | CVE-2025-2357No exploit | DCMTK dcmjpls JPEG-LS Decoder memory corruptionoffis · dcmtk · CWE-119 | Medium5.3 | — | 0.4% | Mar 16, 2025 |
21Monitor | CVE-2025-25472No exploit | A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file.offis · dcmtk · CWE-120 | Medium5.3 | — | 0.4% | Feb 18, 2025 |
19Monitor | CVE-2025-9732No exploit | DCMTK dcm2img diybrpxt.h memory corruptionoffis · dcmtk · CWE-119 | Medium4.8 | — | 0.2% | Aug 31, 2025 |
17Monitor | CVE-2024-34508No exploit | dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.offis · dcmtk · CWE-476 | Medium4.3 | — | 0.7% | May 5, 2024 |
7Monitor | CVE-2022-4981No exploit | DCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereferenceoffis · dcmtk · CWE-404 | Low1.9 | — | 0.3% | Oct 21, 2025 |
7Monitor | CVE-2020-36855No exploit | DCMTK dcmqrscp parseQuota stack-based overflowoffis · dcmtk · CWE-119 | Low1.9 | — | 0.2% | Oct 21, 2025 |
- CVE-2019-101022841Plan
OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow.
CriticalCVSS 9.8No exploitEPSS 8%offis · dcmtkJul 22, 2019
- CVE-2022-212040Plan
OFFIS DCMTK Path Traversal
CriticalCVSS 9.8No exploitEPSS 3%offis · dcmtkJun 24, 2022
- CVE-2022-211940Plan
OFFIS DCMTK Path Traversal
CriticalCVSS 9.8No exploitEPSS 3%offis · dcmtkJun 24, 2022
- CVE-2024-2762832Monitor
Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component.
HighCVSS 8.1No exploitEPSS 1%offis · dcmtkJun 28, 2024
- CVE-2021-4168931Monitor
DCMTK through 3.6.6 does not handle string copy properly.
HighCVSS 7.5No exploitEPSS 2%offis · dcmtkJun 28, 2022
- CVE-2021-4169031Monitor
DCMTK through 3.6.6 does not handle memory free properly.
HighCVSS 7.5No exploitEPSS 2%offis · dcmtkJun 28, 2022
- CVE-2021-4168731Monitor
DCMTK through 3.6.6 does not handle memory free properly.
HighCVSS 7.5No exploitEPSS 2%offis · dcmtkJun 28, 2022
- CVE-2021-4168831Monitor
DCMTK through 3.6.6 does not handle memory free properly.
HighCVSS 7.5No exploitEPSS 2%offis · dcmtkJun 28, 2022
- CVE-2024-2813031Monitor
An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8.
HighCVSS 7.5No exploitEPSS 2%offis · dcmtkApr 23, 2024
- CVE-2024-5233331Monitor
An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8.
HighCVSS 7.8No exploitEPSS 1%offis · dcmtkJan 13, 2025
- CVE-2024-4779631Monitor
An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8.
HighCVSS 7.8No exploitEPSS 1%offis · dcmtkJan 13, 2025
- CVE-2022-4327230Monitor
DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object.
HighCVSS 7.5No exploitEPSS 2%offis · dcmtkDec 2, 2022
- CVE-2025-2547530Monitor
A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via
HighCVSS 7.5No exploitEPSS 1%offis · dcmtkFeb 18, 2025
- CVE-2026-566328Monitor
OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injection
MediumCVSS 6.9No exploitEPSS 3%offis · dcmtkApr 6, 2026
- CVE-2013-682528Monitor
(1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc/wlmactmg.cc, (5) dcmprscp.cc and (6) dcmpsrc
HighCVSS 7.2No exploitEPSS 0%offis · dcmtkJun 10, 2014
- CVE-2022-212126Monitor
OFFIS DCMTK NULL Pointer Dereference
MediumCVSS 6.5No exploitEPSS 1%offis · dcmtkJun 24, 2022
- CVE-2025-2547426Monitor
DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h.
MediumCVSS 6.5No exploitEPSS 0%offis · dcmtkFeb 18, 2025
- CVE-2024-3450921Monitor
dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.
MediumCVSS 5.3No exploitEPSS 1%offis · dcmtkMay 5, 2024
- CVE-2025-235721Monitor
DCMTK dcmjpls JPEG-LS Decoder memory corruption
MediumCVSS 5.3No exploitEPSS 0%offis · dcmtkMar 16, 2025
- CVE-2025-2547221Monitor
A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file.
MediumCVSS 5.3No exploitEPSS 0%offis · dcmtkFeb 18, 2025
- CVE-2025-973219Monitor
DCMTK dcm2img diybrpxt.h memory corruption
MediumCVSS 4.8No exploitEPSS 0%offis · dcmtkAug 31, 2025
- CVE-2024-3450817Monitor
dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.
MediumCVSS 4.3No exploitEPSS 1%offis · dcmtkMay 5, 2024
- CVE-2022-49817Monitor
DCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereference
LowCVSS 1.9No exploitEPSS 0%offis · dcmtkOct 21, 2025
- CVE-2020-368557Monitor
DCMTK dcmqrscp parseQuota stack-based overflow
LowCVSS 1.9No exploitEPSS 0%offis · dcmtkOct 21, 2025