VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jul 22, 2019· Updated Jun 17, 2026

CVE-2019-1010228

CVE-2019-1010228

Description

OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow. The impact is: Possible code execution and confirmed Denial of Service. The component is: DcmRLEDecoder::decompress() (file dcrledec.h, line 122). The attack vector is: Many scenarios of DICOM file processing (e.g. DICOM to image conversion). The fixed version is: 3.6.4, after commit 40917614e.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Dcmtk/Dcmtk
    cpe:2.3:a:offis:dcmtk:*:*:*:*:*:*:*:*
    Range: <=3.6.3
  • Fedoraproject/Fedora2 versions
    cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
  • OFFIS.de/DCMTKllm-create
    Range: <=3.6.3
  • OFFIS.de/DCMTKv5
    Range: 3.6.3 and below [fixed: 3.6.4, after commit 40917614e]

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.