rootpwn

high · CVSS v3 8.2 · CVSS v4 8.8

CVE-2026-97059

DCMTK through 3.7.0 contains a heap over-read vulnerability in ConcatenationLoader that copies pixel data frames without…

Description

DCMTK through 3.7.0 contains a heap over-read vulnerability in ConcatenationLoader that copies pixel data frames without validating the PixelData buffer length against the declared NumberOfFrames. Attackers can craft malicious DICOM instances declaring more frames than the buffer contains to trigger heap over-reads that crash the application or leak adjacent heap memory.

Scores

Severity
high
CVSS v2
8.5
CVSS v3
8.2
CVSS v4
8.8
EPSS
—

← All CVEs

Related CVEs

high

CVE-2026-96751

pmTicket Project-Management-Software is vulnerable to remote SQL injection via the setSync function in add_project.php. Attackers can manipulate the conn_settings argument to execute arbitrary SQL, potentially exposing or altering sensitive data.

View analysis

high

CVE-2026-96762

kvcache-ai mooncake up to 0.3.12/0.3.13.post1 has an authorization bypass in the UnmountSegment RPC Path Handler. Attackers can manipulate client_id/segment_id to gain unauthorized access. Remote exploitation is possible.

View analysis

high

CVE-2026-96803

A vulnerability was identified in java110 MicroCommunity up to 2.0. Affected is the function QueryServiceSMOImpl.fallBack of the file BusinessApi.java of the component fallBack API Endpoint. Such manipulation of the argument fallBackSql leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

View analysis

high

CVE-2026-96884

A security flaw has been discovered in MantisZip up to 0.4.5. Affected by this issue is the function Path.Combine of the file MainWindow.UI.cs of the component Preview. The manipulation results in path traversal. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

View analysis