CVE-2026-44036
published 2026-10-08CVE-2026-44036: Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter…
PriorityP420medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.10%
1.0th percentile
Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted XML file with deeply nested sequence and item elements. The xml2dcm tool and any service that converts untrusted XML to DICOM with this code are affected. The issue is fixed in commit 87f256d73e30656a822bf7d76d1cf1d9bb693954.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| offis | dcmtk | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv4.06.8MEDIUMCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc) of OFFIS DCMTK 3.7.0 allows a
ghsa_unreviewed·2026-10-08
CVE-2026-44036 [MEDIUM] CWE-674 Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc) of OFFIS DCMTK 3.7.0 allows a
Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted XML file with deeply nested sequence and item elements. The xml2dcm tool and any service that converts untrusted XML to DICOM with this code are affected. The issue is fixed in commit 87f256d73e30656a822bf7d76d1cf1d9bb693954.
Red Hat
dcmtk: dcmtk: Denial of Service via uncontrolled recursion during XML parsing
vendor_redhat·2026-10-08·CVSS 5.5
CVE-2026-44036 [MEDIUM] CWE-770 dcmtk: dcmtk: Denial of Service via uncontrolled recursion during XML parsing
dcmtk: dcmtk: Denial of Service via uncontrolled recursion during XML parsing
A flaw was found in DCMTK's XML-to-DICOM converter. An attacker can exploit this vulnerability by supplying a crafted XML file containing deeply nested elements. When parsed, this input triggers uncontrolled recursion that exhausts stack memory and crashes the application, resulting in a Denial of Service (DoS).
Statement: This vulnerability is rated as Moderate because triggering the flaw requires local user interaction or an automated pipeline to ingest untrusted XML content, and the resulting failure is confined to a process crash. Typical Red Hat deployments do not expose DICOM conversion utilities directly to untrusted network traffic, limiting exposure to scenarios where malicious input is explicitly proc
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-44036 dcmtk: dcmtk: Denial of Service via uncontrolled recursion during XML parsing [epel-all]
bugzilla·2026-10-08·CVSS 5.5
CVE-2026-44036 [MEDIUM] CVE-2026-44036 dcmtk: dcmtk: Denial of Service via uncontrolled recursion during XML parsing [epel-all]
CVE-2026-44036 dcmtk: dcmtk: Denial of Service via uncontrolled recursion during XML parsing [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted XML file with deeply nested sequence and item elements. The xml2dcm tool and any service that converts untrusted XML to DICOM with this code are affected. The issue is fixed in co
Bugzilla
CVE-2026-44036 dcmtk: dcmtk: Denial of Service via uncontrolled recursion during XML parsing [fedora-all]
bugzilla·2026-10-08·CVSS 5.5
CVE-2026-44036 [MEDIUM] CVE-2026-44036 dcmtk: dcmtk: Denial of Service via uncontrolled recursion during XML parsing [fedora-all]
CVE-2026-44036 dcmtk: dcmtk: Denial of Service via uncontrolled recursion during XML parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted XML file with deeply nested sequence and item elements. The xml2dcm tool and any service that converts untrusted XML to DICOM with this code are affected. The issue is fixed in
Bugzilla
CVE-2026-44036 dcmtk: dcmtk: Denial of Service via uncontrolled recursion during XML parsing
bugzilla·2026-10-08·CVSS 5.5
CVE-2026-44036 [MEDIUM] CVE-2026-44036 dcmtk: dcmtk: Denial of Service via uncontrolled recursion during XML parsing
CVE-2026-44036 dcmtk: dcmtk: Denial of Service via uncontrolled recursion during XML parsing
Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted XML file with deeply nested sequence and item elements. The xml2dcm tool and any service that converts untrusted XML to DICOM with this code are affected. The issue is fixed in commit 87f256d73e30656a822bf7d76d1cf1d9bb693954.
2026-10-08
Published