J4Care dcm4che
CISA warns J4Care dcm4chee-arc-light 5.35.1 flaws can delete images and expose patient data.
Stories per day · 30 days
2 RSS
Relateddcm4che2healthcare2path-traversal2cisa1cwe-221denial-of-service1ics1j4care1missing-authorization1pacs1pacsone1rainbowfish1rce1syss1unpatched1
6 stories, newest first · one card per story
Stories tagged #dicom
[SYSS-2026-080]: dcm4che - Path Traversal (CWE-22)
SySS disclosed an unpatched high-risk path traversal in dcm4che 5.35.0, with no CVE yet.
[0day-rubbish] PacsOne Server 7.3.9 authenticated DICOMweb STOW-RS SOP Instance UID path traversal to www-data code execution on a PACS host (7.2)
PacsOne Server 7.3.9 DICOMweb path traversal can execute code as www-data.
[SYSS-2026-068]: GDCM (Grassroots DICOM) - Stack-based Buffer Overflow (CWE-121)
SySS disclosed an unpatched stack-based buffer overflow in GDCM 3.3.0, a Grassroots DICOM library.
Orthanc DICOM Server
CISA advisory flags CVE-2026-87020, an integer overflow in Orthanc DICOM Server <1.13.0 causing heap out-of-bounds write and denial of service when decoding crafted PNG/JPEG images.
1
GDCM <= 3.2.7: six memory-safety and denial-of-service vulnerabilities, no CVE
Six memory-safety and denial-of-service flaws disclosed in the GDCM DICOM parsing library, affecting versions through 3.2.7.