https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T22:42:00.319115+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-44033 fkie_cve-2026-44033 2026-10-20T22:42:00.351808+00:00

Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc/ofxml.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted XML document with deeply nested elements. The parser is reachable through dcmencap when encapsulating a CDA document, and through any application that calls OFXMLParser::parseFile() or OFXMLParser::parseString() on untrusted input. The issue is fixed in commit d12e350e687530eb41e2b0c860aff4d8c04e5941.

 https://db.gcve.eu/vuln/ghsa-g7gr-959v-68f6 GHSA-g7gr-959v-68f6 2026-10-20T22:42:00.351894+00:00

Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc/ofxml.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted XML document with deeply nested elements. The parser is reachable through dcmencap when encapsulating a CDA document, and through any application that calls OFXMLParser::parseFile() or OFXMLParser::parseString() on untrusted input. The issue is fixed in commit d12e350e687530eb41e2b0c860aff4d8c04e5941.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-44033 UBUNTU-CVE-2026-44033 2026-10-20T22:42:00.351919+00:00

Affected: Ubuntu:Pro:16.04:LTS: dcmtk, Ubuntu:Pro:18.04:LTS: dcmtk, Ubuntu:Pro:20.04:LTS: dcmtk, Ubuntu:Pro:22.04:LTS: dcmtk, Ubuntu:Pro:24.04:LTS: dcmtk, Ubuntu:26.10: dcmtk, Ubuntu:26.04:LTS: dcmtk

Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc/ofxml.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted XML document with deeply nested elements. The parser is reachable through dcmencap when encapsulating a CDA document, and through any application that calls OFXMLParser::parseFile() or OFXMLParser::parseString() on untrusted input. The issue is fixed in commit d12e350e687530eb41e2b0c860aff4d8c04e5941.