ICSMA-26-083-01 · Published 2026-03-24 · View on CISA ICS-CERT ↗

Grassroots DICOM (GDCM)

CVSS 7.5 HIGH

Risk Summary

Successful exploitation of this vulnerability could allow an attacker to send a specially crafted file, and when parsed, could result in a denial-of-service condition.

CVEs (1)

CVE-2026-3650

Remediations

The maintainer of Grassroots DICOM (GDCM) has not responded to requests to work with CISA to mitigate this vulnerability. For update information refer to the software page on SourceForge.
https://sourceforge.net/projects/gdcm/.

Affected Vendors

Grassroots

Affected Products (1)

Grassroots · Grassroots DICOM (GDCM) 3.2.2

Affected Sectors

Healthcare and Public Health

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more