Description
An unauthenticated remote attacker can repeatedly send a single crafted connection request to leak memory. Against storescp in its default single-process mode, memory grows quickly and the service is eventually killed, after which it stops accepting connections until an operator restarts it.
Published: 2026-06-30
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

An attacker without authentication can repeatedly send a crafted connection request to the DCMTK storescp service, causing it to leak heap memory. The memory usage grows until the service exhausts available memory and is killed, after which it stops accepting new connections until an operator restarts it. This results in a denial‑of‑service condition that impacts the availability of the DICOM service.

Affected Systems

The vulnerability affects the OFFIS DICOM DCMTK Toolkit, specifically the storescp component when running in its default single‑process mode. Any release prior to the latest GitHub release contains the flaw.

Risk and Exploitability

The CVSS score of 8.7 indicates a high severity. EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is remote and unauthenticated, requiring only repeated network requests. Once exploited, the service terminates, causing a denial of service until the operator restarts it. A fix is available in the latest GitHub release; applying this update mitigates the issue.

Generated by OpenCVE AI on June 30, 2026 at 23:31 UTC.

Remediation

Vendor Solution

The maintainer was notified of these vulnerabilities and has provided a fix. The fix is included in the latest commits and can be obtained in the following snapshot: https://github.com/DCMTK/dcmtk/releases/tag/latest Users are recommended to download the latest GitHub release once it becomes available.

OpenCVE Recommended Actions

  • Download and install the latest DCMTK release from https://github.com/DCMTK/dcmtk/releases/tag/latest.
  • Restart the storescp service to apply the memory‑management fix.
  • If possible, configure storescp to use multi‑process mode or other memory‑conservative settings in the DCMTK documentation to reduce memory pressure when the service is restarted.

Generated by OpenCVE AI on June 30, 2026 at 23:31 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 01 Jul 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 01 Jul 2026 10:30:00 +0000

Type Values Removed Values Added
First Time appeared Offis Dicom
Offis Dicom dcmtk Toolkit
Vendors & Products Offis Dicom
Offis Dicom dcmtk Toolkit

Tue, 30 Jun 2026 21:30:00 +0000

Type Values Removed Values Added
Description An unauthenticated remote attacker can repeatedly send a single crafted connection request to leak memory. Against storescp in its default single-process mode, memory grows quickly and the service is eventually killed, after which it stops accepting connections until an operator restarts it.
Title OFFIS DCMTK Toolkit Missing Release of Memory after Effective Lifetime
Weaknesses CWE-401
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Offis Dicom Dcmtk Toolkit
cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published:

Updated: 2026-07-01T15:40:16.809Z

Reserved: 2026-06-22T17:03:25.973Z

Link: CVE-2026-50254

cve-icon Vulnrichment

Updated: 2026-07-01T15:40:12.558Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-01T10:00:59Z

Weaknesses
  • CWE-401

    Missing Release of Memory after Effective Lifetime