OFFIS records

24 published records for vendor offis.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 4
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

24 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
41Plan	CVE-2019-1010228No exploit	OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow.offis · dcmtk · CWE-787 Pre-auth Memory safety	Critical9.8	—	7.6%	Jul 22, 2019
40Plan	CVE-2022-2120No exploit	OFFIS DCMTK Path Traversaloffis · dcmtk · CWE-23 pre-auth RCE Path traversal	Critical9.8	—	3.2%	Jun 24, 2022
40Plan	CVE-2022-2119No exploit	OFFIS DCMTK Path Traversaloffis · dcmtk · CWE-22 pre-auth RCE Path traversal	Critical9.8	—	3.2%	Jun 24, 2022
32Monitor	CVE-2024-27628No exploit	Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component.offis · dcmtk · CWE-120 RCE Memory safety	High8.1	—	0.7%	Jun 28, 2024
31Monitor	CVE-2021-41689No exploit	DCMTK through 3.6.6 does not handle string copy properly.offis · dcmtk · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	2.0%	Jun 28, 2022
31Monitor	CVE-2021-41690No exploit	DCMTK through 3.6.6 does not handle memory free properly.offis · dcmtk · CWE-401 Pre-auth Denial of service	High7.5	—	1.8%	Jun 28, 2022
31Monitor	CVE-2021-41687No exploit	DCMTK through 3.6.6 does not handle memory free properly.offis · dcmtk · CWE-401 Pre-auth Denial of service	High7.5	—	1.8%	Jun 28, 2022
31Monitor	CVE-2021-41688No exploit	DCMTK through 3.6.6 does not handle memory free properly.offis · dcmtk · CWE-415 Pre-auth Memory safety Denial of service	High7.5	—	1.8%	Jun 28, 2022
31Monitor	CVE-2024-28130No exploit	An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8.offis · dcmtk · CWE-704 pre-auth RCE Denial of service	High7.5	—	1.7%	Apr 23, 2024
31Monitor	CVE-2024-52333No exploit	An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8.offis · dcmtk · CWE-119 Memory safety	High7.8	—	0.6%	Jan 13, 2025
31Monitor	CVE-2024-47796No exploit	An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8.offis · dcmtk · CWE-119 Memory safety	High7.8	—	0.6%	Jan 13, 2025
30Monitor	CVE-2022-43272No exploit	DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object.offis · dcmtk · CWE-401 Pre-auth Denial of service	High7.5	—	1.6%	Dec 2, 2022
30Monitor	CVE-2025-25475No exploit	A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) viaoffis · dcmtk · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	0.6%	Feb 18, 2025
28Monitor	CVE-2026-5663No exploit	OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injectionoffis · dcmtk · CWE-77 pre-auth RCE Command injection	Medium6.9	—	2.8%	Apr 6, 2026
28Monitor	CVE-2013-6825No exploit	(1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc/wlmactmg.cc, (5) dcmprscp.cc and (6) dcmpsrcoffis · dcmtk · CWE-264 Local privilege escalation	High7.2	—	0.5%	Jun 10, 2014
26Monitor	CVE-2022-2121No exploit	OFFIS DCMTK NULL Pointer Dereferenceoffis · dcmtk · CWE-476 Pre-auth Memory safety Denial of service	Medium6.5	—	0.8%	Jun 24, 2022
26Monitor	CVE-2025-25474No exploit	DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h.offis · dcmtk · CWE-120 Pre-auth Memory safety	Medium6.5	—	0.4%	Feb 18, 2025
21Monitor	CVE-2024-34509No exploit	dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.offis · dcmtk Pre-auth Denial of service	Medium5.3	—	0.7%	May 5, 2024
21Monitor	CVE-2025-2357No exploit	DCMTK dcmjpls JPEG-LS Decoder memory corruptionoffis · dcmtk · CWE-119 Pre-auth Memory safety	Medium5.3	—	0.4%	Mar 16, 2025
21Monitor	CVE-2025-25472No exploit	A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file.offis · dcmtk · CWE-120 Pre-auth Memory safety	Medium5.3	—	0.4%	Feb 18, 2025
19Monitor	CVE-2025-9732No exploit	DCMTK dcm2img diybrpxt.h memory corruptionoffis · dcmtk · CWE-119 Memory safety	Medium4.8	—	0.2%	Aug 31, 2025
17Monitor	CVE-2024-34508No exploit	dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.offis · dcmtk · CWE-476 Memory safety Denial of service	Medium4.3	—	0.7%	May 5, 2024
7Monitor	CVE-2022-4981No exploit	DCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereferenceoffis · dcmtk · CWE-404	Low1.9	—	0.3%	Oct 21, 2025
7Monitor	CVE-2020-36855No exploit	DCMTK dcmqrscp parseQuota stack-based overflowoffis · dcmtk · CWE-119 Memory safety	Low1.9	—	0.2%	Oct 21, 2025

CVE-2019-1010228
41Plan
OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow.
CriticalCVSS 9.8No exploitEPSS 8%
- Pre-auth
- Memory safety
offis · dcmtkJul 22, 2019
CVE-2022-2120
40Plan
OFFIS DCMTK Path Traversal
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- Path traversal
offis · dcmtkJun 24, 2022
CVE-2022-2119
40Plan
OFFIS DCMTK Path Traversal
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- Path traversal
offis · dcmtkJun 24, 2022
CVE-2024-27628
32Monitor
Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component.
HighCVSS 8.1No exploitEPSS 1%
- RCE
- Memory safety
offis · dcmtkJun 28, 2024
CVE-2021-41689
31Monitor
DCMTK through 3.6.6 does not handle string copy properly.
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Memory safety
- Denial of service
offis · dcmtkJun 28, 2022
CVE-2021-41690
31Monitor
DCMTK through 3.6.6 does not handle memory free properly.
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Denial of service
offis · dcmtkJun 28, 2022
CVE-2021-41687
31Monitor
DCMTK through 3.6.6 does not handle memory free properly.
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Denial of service
offis · dcmtkJun 28, 2022
CVE-2021-41688
31Monitor
DCMTK through 3.6.6 does not handle memory free properly.
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Memory safety
- Denial of service
offis · dcmtkJun 28, 2022
CVE-2024-28130
31Monitor
An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8.
HighCVSS 7.5No exploitEPSS 2%
- pre-auth RCE
- Denial of service
offis · dcmtkApr 23, 2024
CVE-2024-52333
31Monitor
An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8.
HighCVSS 7.8No exploitEPSS 1%
- Memory safety
offis · dcmtkJan 13, 2025
CVE-2024-47796
31Monitor
An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8.
HighCVSS 7.8No exploitEPSS 1%
- Memory safety
offis · dcmtkJan 13, 2025
CVE-2022-43272
30Monitor
DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object.
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Denial of service
offis · dcmtkDec 2, 2022
CVE-2025-25475
30Monitor
A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
offis · dcmtkFeb 18, 2025
CVE-2026-5663
28Monitor
OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injection
MediumCVSS 6.9No exploitEPSS 3%
- pre-auth RCE
- Command injection
offis · dcmtkApr 6, 2026
CVE-2013-6825
28Monitor
(1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc/wlmactmg.cc, (5) dcmprscp.cc and (6) dcmpsrc
HighCVSS 7.2No exploitEPSS 0%
- Local privilege escalation
offis · dcmtkJun 10, 2014
CVE-2022-2121
26Monitor
OFFIS DCMTK NULL Pointer Dereference
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
offis · dcmtkJun 24, 2022
CVE-2025-25474
26Monitor
DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h.
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Memory safety
offis · dcmtkFeb 18, 2025
CVE-2024-34509
21Monitor
dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
- Denial of service
offis · dcmtkMay 5, 2024
CVE-2025-2357
21Monitor
DCMTK dcmjpls JPEG-LS Decoder memory corruption
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Memory safety
offis · dcmtkMar 16, 2025
CVE-2025-25472
21Monitor
A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file.
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Memory safety
offis · dcmtkFeb 18, 2025
CVE-2025-9732
19Monitor
DCMTK dcm2img diybrpxt.h memory corruption
MediumCVSS 4.8No exploitEPSS 0%
- Memory safety
offis · dcmtkAug 31, 2025
CVE-2024-34508
17Monitor
dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.
MediumCVSS 4.3No exploitEPSS 1%
- Memory safety
- Denial of service
offis · dcmtkMay 5, 2024
CVE-2022-4981
7Monitor
DCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereference
LowCVSS 1.9No exploitEPSS 0%
offis · dcmtkOct 21, 2025
CVE-2020-36855
7Monitor
DCMTK dcmqrscp parseQuota stack-based overflow
LowCVSS 1.9No exploitEPSS 0%
- Memory safety
offis · dcmtkOct 21, 2025