Back to Database
Status published
High
CVE-2021-41688
DCMTK through 3.6.6 does not handle memory free properly. The...
Vulnerability Description
DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but its address is still used in other locations. Sending specific requests to the dcmqrdb program will incur a double free. An attacker can use it to launch a DoS attack.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-41688
Credits & Attribution
No credits recorded in the NVD database.
References
More from offis
View All →CVE-2022-43272
DCMTK v3.6.7 was discovered to contain a memory leak via...
Unknown
0
CVE-2021-41690
DCMTK through 3.6.6 does not handle memory free properly. The...
High
7.5
CVE-2021-41689
DCMTK through 3.6.6 does not handle string copy properly. Sending...
Unknown
0
CVE-2021-41687
DCMTK through 3.6.6 does not handle memory free properly. The...
High
7.5
CVE-2013-6825
(1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4)...
High
7.2
Affected Vendor
offis
View all reports →Affected Software
dcmtk
Vulnerable Versions:
0
Timeline
Official Publish:
June 28th, 2022
Last Modified:
November 3rd, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.