CVE Feed

    Dashboard / CVE / CVE-2025-14841

    CVE-2025-14841

    A flaw has been found in OFFIS DCMTK up to 3.6.9. The impacted element is the function DcmQueryRetrieveIndexDatabaseHandle::startFindRequest/DcmQueryRetrieveIndexDatabaseHandle::startMoveRequest in the library dcmqrdb/libsrc/dcmqrdbi.cc of the component dcmqrscp. This manipulation causes null pointer dereference. The attack requires local access. Upgrading to version 3.7.0 is sufficient to resolve this issue. Patch name: ffb1a4a37d2c876e3feeb31df4930f2aed7fa030. You should upgrade the affected component.

    Published:Dec 18, 2025
    Last Modified:Apr 15, 2026
    EPS:Dec 18, 2025
    EPSS Score:0.00028
    CVSS Score:3.3

    Affected Products

    Vendor
    Offis
    Product
    Dcmtk

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-12805 (CVSS 2.1) — A flaw has been found in OFFIS DCMTK up to 3.7.0. The affected element is the function XMLNode::parseFile in t…
    CVE-2026-10194 (CVSS 5.3) — A weakness has been identified in OFFIS DCMTK 3.7.0. This affects the function DcmQueryRetrieveIndexDatabaseHa…
    CVE-2026-5663 (CVSS 6.9) — A security flaw has been discovered in OFFIS DCMTK up to 3.7.0. This impacts the function executeOnReception/e…
    CVE-2025-14607 (CVSS 5.3) — A vulnerability was detected in OFFIS DCMTK up to 3.6.9. Affected by this issue is the function DcmByteString:…
    CVE-2022-4981 (CVSS 1.9) — A vulnerability was detected in DCMTK up to 3.6.7. The impacted element is the function DcmQueryRetrieveConfig…
    CVE-2020-36855 (CVSS 1.9) — A security vulnerability has been detected in DCMTK up to 3.6.5. The affected element is the function parseQuo…
    CVE-2025-9732 (CVSS 4.8) — A vulnerability was identified in DCMTK up to 3.6.9. This affects an unknown function in the library dcmimage/…
    CVE-2025-2357 (CVSS 5.3) — A vulnerability was found in DCMTK 3.6.9. It has been declared as critical. This vulnerability affects unknown…
    CVE-2025-25474 (CVSS 6.5) — DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h.…
    CVE-2025-25472 (CVSS 5.3) — A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a cr…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High