CVE-2026-10194

Medium

Description

A weakness has been identified in OFFIS DCMTK 3.7.0. This affects the function DcmQueryRetrieveIndexDatabaseHandle::deleteOldestImages of the file dcmqrdb/libsrc/dcmqrdbi.cc of the component dcmqrscp. Executing a manipulation can lead to heap-based buffer overflow. The attack may be launched remotely. This patch is called 0f78a4ef6f645ea5530166e445e5436a5de58e75. A patch should be applied to remediate this issue.

SeverityMedium

CVSS6.3

Exploit probability—

ProductOffis Dcmtk

PublishedMay 31, 2026

First seenMay 31, 2026

Weakness typeCWE-122CWE-122 CWE-119Memory buffer bounds error

How to fix

Patches

git.dcmtk.org/?p=dcmtk.git;a=commit;h=0f78a4ef6f645ea5530166e445e5436a5de58e75

Affected products

Product	Affected versions	Fixed in
offis dcmtk	3.7.0	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.