CVE-2026-44035

Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOMDIR file with a deeply chained sequence of directory records linked through the Offset of Referenced Lower-Level Directory Entity attribute. Any application that opens the DICOMDIR is affected, including dcmgpdir and media viewers built on DCMTK. The issue is fixed in commit ca761f7f3dcaaddaa95be87cf5d736138d7c3a9f.

• CWE-674

• https://github.com/DCMTK/dcmtk/commit/ca761f7f3dcaaddaa95be87cf5d736138d7c3a9f
• https://support.dcmtk.org/redmine/issues/1215

Published

Oct 8, 2026

Last Modified

Oct 8, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-44025Fluentd collects events from various data sources and writes…7.5
• CVE-2026-44028An issue was discovered in Nix before 2.34.7 and Lix before …7.5
• CVE-2026-44029An issue was discovered in Nix before 2.34.7. Writing to arb…5.3
• CVE-2026-44031Uncontrolled recursion in DcmSequenceOfItems::read() and Dcm…7.5
• CVE-2026-44033Uncontrolled recursion in XMLNode::ParseXMLElement() and XML…5.5
• CVE-2026-44034A heap-based out-of-bounds read in DcmRLECodecDecoder::decod…4.4
• CVE-2026-44036Uncontrolled mutual recursion between DcmXMLParseHelper::par…5.5
• CVE-2026-44037Uncontrolled mutual recursion between DcmJSONReader::parseDa…5.5
• CVE-2026-44038A global out-of-bounds read in the Huffman decoder of the bu…4.4
• CVE-2026-4404Use of hard coded credentials in GoHarbor Harbor version 2.1…9.4
• CVE-2026-44040UltraVNC through 1.8.2.2 uses a cryptographically weak pseud…6.5
• CVE-2026-44041UltraVNC through 1.8.2.2 contains an out-of-bounds read in t…6.5