ICSMA-26-181-01 · Published 2026-06-30 · View on CISA ICS-CERT ↗

OFFIS DCMTK Toolkit

CVSS 9.8 CRITICAL

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker to write files, access unauthorized information, exhaust memory, or crash affected DCMTK client or server processes.

CVEs (5)

CVE-2026-50003 CVE-2026-50254 CVE-2026-35505 CVE-2026-52868 CVE-2026-44628

Remediations

The maintainer was notified of these vulnerabilities and has provided a fix. The fix is included in the latest commits and can be obtained in the following snapshot:
https://github.com/DCMTK/dcmtk/releases/tag/latest.
Users are recommended to download the latest GitHub release once it becomes available.

Affected Vendors

OFFIS

Affected Products (1)

OFFIS · DCMTK <=3.7.0

Affected Sectors

Healthcare and Public Health

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more