CVE-2026-44037

Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOM JSON document with deeply nested sequence (SQ) values. The json2dcm tool and any service that converts untrusted DICOM JSON (for example, DICOMweb payloads) with this reader are affected. The issue is fixed in commit cf955e64c35a1e07ba10698f639d5dcdec53b9d7.

• CWE-674

• https://github.com/DCMTK/dcmtk/commit/cf955e64c35a1e07ba10698f639d5dcdec53b9d7
• https://support.dcmtk.org/redmine/issues/1225

Published

Oct 8, 2026

Last Modified

Oct 8, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-44029An issue was discovered in Nix before 2.34.7. Writing to arb…5.3
• CVE-2026-44031Uncontrolled recursion in DcmSequenceOfItems::read() and Dcm…7.5
• CVE-2026-44033Uncontrolled recursion in XMLNode::ParseXMLElement() and XML…5.5
• CVE-2026-44034A heap-based out-of-bounds read in DcmRLECodecDecoder::decod…4.4
• CVE-2026-44035Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in…5.5
• CVE-2026-44036Uncontrolled mutual recursion between DcmXMLParseHelper::par…5.5
• CVE-2026-44038A global out-of-bounds read in the Huffman decoder of the bu…4.4
• CVE-2026-4404Use of hard coded credentials in GoHarbor Harbor version 2.1…9.4
• CVE-2026-44040UltraVNC through 1.8.2.2 uses a cryptographically weak pseud…6.5
• CVE-2026-44041UltraVNC through 1.8.2.2 contains an out-of-bounds read in t…6.5
• CVE-2026-44042UltraVNC repeater through 1.8.2.2 contains an off-by-one err…3.7
• CVE-2026-44046Use of Less Trusted Source vulnerability in Apache APISIX. …5.8