Back to Database
Status published
Unknown
CVE-2021-41689
DCMTK through 3.6.6 does not handle string copy properly. Sending...
Vulnerability Description
DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would query its database and copy the result even if the result is null, which can incur a head-based overflow. An attacker can use it to launch a DoS attack.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-41689
Credits & Attribution
No credits recorded in the NVD database.
References
More from offis
View All →CVE-2022-43272
DCMTK v3.6.7 was discovered to contain a memory leak via...
Unknown
0
CVE-2021-41690
DCMTK through 3.6.6 does not handle memory free properly. The...
High
7.5
CVE-2021-41688
DCMTK through 3.6.6 does not handle memory free properly. The...
High
7.5
CVE-2021-41687
DCMTK through 3.6.6 does not handle memory free properly. The...
High
7.5
CVE-2013-6825
(1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4)...
High
7.2
Affected Vendor
offis
View all reports →Affected Software
dcmtk
Vulnerable Versions:
0
Timeline
Official Publish:
June 28th, 2022
Last Modified:
November 3rd, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.