[SYSS-2026-071]: GDCM (Grassroots DICOM) - Format String (CWE-134)
SySS disclosed an unpatched medium-risk format-string flaw in GDCM 3.3.0, with no CVE assigned.
36
- Mentions · 7d0
- Mentions · 30d0
- All mentions6
- First seenSep 10, 2026
- Last mentionedSep 27, 2026
Timeline
6 articles · newest first[SYSS-2026-070]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)
SySS disclosed unpatched high-risk integer overflow SYSS-2026-070 in GDCM 3.3.0, with no CVE.
44
[SYSS-2026-069]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)
SySS disclosed a second unpatched high-risk integer overflow, SYSS-2026-069, in GDCM 3.3.0.
44
[SYSS-2026-068]: GDCM (Grassroots DICOM) - Stack-based Buffer Overflow (CWE-121)
SySS disclosed an unpatched stack-based buffer overflow in GDCM 3.3.0, a Grassroots DICOM library.
52
[SYSS-2026-067]: GDCM (Grassroots DICOM) - Stack-based Buffer Overflow (CWE-121)
SySS disclosed an unpatched stack-based buffer overflow in GDCM 3.3.0, with no CVE assigned.
46
GDCM <= 3.2.7: six memory-safety and denial-of-service vulnerabilities, no CVE
Six memory-safety and denial-of-service flaws disclosed in the GDCM DICOM parsing library, affecting versions through 3.2.7.
38
Appears with
- GDCM Projectvendor · 5
- SySSorganization · 5
- GDCM Projectorganization · 3
- GDCMvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.