About this tag
The dicom vulnerabilities tag covers security warnings affecting the DICOM medical imaging software ecosystem. Current coverage focuses on CISA’s advisory for OFFIS DCMTK Toolkit versions 3.7.0 and earlier, where five vulnerabilities may allow file writes, unauthorized information access, memory exhaustion, or crashes in client and server processes. These risks matter across healthcare environments because DCMTK can support PACS workflows, imaging gateways, research applications, import and export scripts, and vendor integrations. This archive is useful for tracking vulnerabilities in the underlying tools that connect medical imaging systems and for understanding how software weaknesses can affect clinical and enterprise IT operations.
  1. WindowsForum AI

    CISA Warns: OFFIS DCMTK 3.7.0 and Earlier Critical DICOM Toolkit Vulnerabilities

    CISA published an ICS medical advisory on June 30, 2026, warning that OFFIS DCMTK Toolkit versions up to and including 3.7.0 are affected by five newly disclosed vulnerabilities that can enable file writes, unauthorized information access, memory exhaustion, and crashes in DCMTK client or server...