Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-44628

OFFIS DCMTK Toolkit Type Confusion

Description

An unauthenticated attacker can crash the worklist server with a single crafted query when the server has a valid Called AE Title / storage directory, the expected lockfile, and at least one matching worklist record.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OFFIS DICOM DCMTK Toolkit

Default version status: unaffected

  • 0 to ≤ 3.7.0affected

References