CVE-2026-44037
published 2026-10-08CVE-2026-44037: Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in…
PriorityP420medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.10%
1.0th percentile
Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOM JSON document with deeply nested sequence (SQ) values. The json2dcm tool and any service that converts untrusted DICOM JSON (for example, DICOMweb payloads) with this reader are affected. The issue is fixed in commit cf955e64c35a1e07ba10698f639d5dcdec53b9d7.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| offis | dcmtk | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv4.06.8MEDIUMCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attac
ghsa_unreviewed·2026-10-08
CVE-2026-44037 [MEDIUM] CWE-674 Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attac
Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOM JSON document with deeply nested sequence (SQ) values. The json2dcm tool and any service that converts untrusted DICOM JSON (for example, DICOMweb payloads) with this reader are affected. The issue is fixed in commit cf955e64c35a1e07ba10698f639d5dcdec53b9d7.
Red Hat
dcmtk: dcmtk: Denial of Service via deeply nested DICOM JSON document
vendor_redhat·2026-10-08·CVSS 5.5
CVE-2026-44037 [MEDIUM] CWE-770 dcmtk: dcmtk: Denial of Service via deeply nested DICOM JSON document
dcmtk: dcmtk: Denial of Service via deeply nested DICOM JSON document
A flaw was found in dcmtk. An attacker can cause a Denial of Service (DoS) by providing a crafted DICOM (Digital Imaging and Communications in Medicine) JSON document containing deeply nested sequence values. Processing this input triggers uncontrolled recursion in the JSON parser, causing stack memory exhaustion and crashing the application.
Statement: This vulnerability is rated as Moderate because triggering the crash requires processing a maliciously constructed DICOM JSON payload, which leads to application termination through exhausted stack memory without impacting data confidentiality or integrity. The dcmtk package is not part of core Red Hat Enterprise Linux and is only shipped via community channels such as
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-44037 dcmtk: dcmtk: Denial of Service via deeply nested DICOM JSON document
bugzilla·2026-10-08·CVSS 5.5
CVE-2026-44037 [MEDIUM] CVE-2026-44037 dcmtk: dcmtk: Denial of Service via deeply nested DICOM JSON document
CVE-2026-44037 dcmtk: dcmtk: Denial of Service via deeply nested DICOM JSON document
Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOM JSON document with deeply nested sequence (SQ) values. The json2dcm tool and any service that converts untrusted DICOM JSON (for example, DICOMweb payloads) with this reader are affected. The issue is fixed in commit cf955e64c35a1e07ba10698f639d5dcdec53b9d7.
Bugzilla
CVE-2026-44037 dcmtk: dcmtk: Denial of Service via deeply nested DICOM JSON document [epel-all]
bugzilla·2026-10-08·CVSS 5.5
CVE-2026-44037 [MEDIUM] CVE-2026-44037 dcmtk: dcmtk: Denial of Service via deeply nested DICOM JSON document [epel-all]
CVE-2026-44037 dcmtk: dcmtk: Denial of Service via deeply nested DICOM JSON document [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOM JSON document with deeply nested sequence (SQ) values. The json2dcm tool and any service that converts untrusted DICOM JSON (for example, DICOMweb payloads) with this reader are affected.
Bugzilla
CVE-2026-44037 dcmtk: dcmtk: Denial of Service via deeply nested DICOM JSON document [fedora-all]
bugzilla·2026-10-08·CVSS 5.5
CVE-2026-44037 [MEDIUM] CVE-2026-44037 dcmtk: dcmtk: Denial of Service via deeply nested DICOM JSON document [fedora-all]
CVE-2026-44037 dcmtk: dcmtk: Denial of Service via deeply nested DICOM JSON document [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOM JSON document with deeply nested sequence (SQ) values. The json2dcm tool and any service that converts untrusted DICOM JSON (for example, DICOMweb payloads) with this reader are affected
2026-10-08
Published