PT-2021-7872 · Offis+5 · Dcmtk+5

Published

2021-07-16

·

Updated

2025-04-03

·

CVE-2022-2121

CVSS v3.1

7.5

High

VectorAV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions OFFIS DCMTK versions prior to 3.6.7
Description The issue is related to a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition. This vulnerability is associated with errors in pointer dereferencing, allowing an attacker to cause a denial of service.
Recommendations For versions prior to 3.6.7, update to version 3.6.7 or later to resolve the issue. As a temporary workaround, consider restricting the processing of DICOM files until a patch is available.

Fix

DoS

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2024-15767
ALT-PU-2024-5081
ALT-PU-2025-4731
BDU:2023-03842
CVE-2022-2121
DLA-3847-1
DLA-4038-1
DLA-4038-2
MGASA-2023-0083
OPENSUSE-SU-2023:0108-1
OPENSUSE-SU-2024:12925-1
ROSA-SA-2025-2643
USN-5882-1
USN-7010-1

Affected Products

Alt Linux
Astra Linux
Dcmtk
Linuxmint
Red Os
Ubuntu