Back to Database
Status published
High
CVE-2021-41687
DCMTK through 3.6.6 does not handle memory free properly. The...
Vulnerability Description
DCMTK through 3.6.6 does not handle memory free properly. The program malloc a heap memory for parsing data, but does not free it when error in parsing. Sending specific requests to the dcmqrdb program incur the memory leak. An attacker can use it to launch a DoS attack.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-41687
Credits & Attribution
No credits recorded in the NVD database.
References
More from offis
View All →CVE-2022-43272
DCMTK v3.6.7 was discovered to contain a memory leak via...
Unknown
0
CVE-2021-41690
DCMTK through 3.6.6 does not handle memory free properly. The...
High
7.5
CVE-2021-41689
DCMTK through 3.6.6 does not handle string copy properly. Sending...
Unknown
0
CVE-2021-41688
DCMTK through 3.6.6 does not handle memory free properly. The...
High
7.5
CVE-2013-6825
(1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4)...
High
7.2
Affected Vendor
offis
View all reports →Affected Software
dcmtk
Vulnerable Versions:
0
Timeline
Official Publish:
June 28th, 2022
Last Modified:
November 3rd, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.