https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T04:03:19.956794+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-12805 CVE-2026-12805 — OFFIS DCMTK ofxml.cc parseFile heap-based overflow 2026-10-05T04:03:19.975296+00:00

Affected: OFFIS DCMTK

A flaw has been found in OFFIS DCMTK up to 3.7.0. The affected element is the function XMLNode::parseFile in the library ofstd/libsrc/ofxml.cc. Executing a manipulation can lead to heap-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used. This patch is called 1d4b3815c0987840a983160bfc671fef63a3105b. It is best practice to apply a patch to resolve this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.