[SYSS-2026-070]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)
SySS disclosed unpatched high-risk integer overflow SYSS-2026-070 in GDCM 3.3.0, with no CVE.
SySS advisory SYSS-2026-070 reports an integer overflow (CWE-190) in GDCM (Grassroots DICOM) version 3.3.0. The lab rates the risk high and lists the solution status as open. The manufacturer was notified on 2026-07-24, with public disclosure on 2026-09-23. No CVE is assigned and the text does not claim exploitation in the wild.
- Integer overflow (CWE-190) tracked as SYSS-2026-070.
- Affects GDCM 3.3.0; tested on that version.
- SySS rates the risk high and the fix status open.
- No CVE identifier has been assigned.
- Public disclosure date is 2026-09-23.
- Vendors
- GDCM Project
- Products
- GDCM
- Organizations
- SySSGDCM Project
From the original article
Posted by Matthias Deeg via Fulldisclosure on Sep 26 Advisory ID: SYSS-2026-070 Product: GDCM (Grassroots DICOM) Manufacturer: GDCM Project Affected Version(s): 3. 3. 0 Tested Version(s): 3.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.