THREAT OPS › Threat News › GDCM <= 3.2.7: six memory-safety and denial-of-service vulnerabilities, no CVE
GDCM <= 3.2.7: six memory-safety and denial-of-service vulnerabilities, no CVE
<p>Posted by Abhinav Agarwal on Sep 09</p>I am disclosing six vulnerabilities in GDCM (Grassroots DICOM), an<br /> open-source C++ library for parsing and processing DICOM files. I confirmed<br /> all six against GDCM 3.2.6 with AddressSanitizer or<br /> UndefinedBehaviorSanitizer; source review found the vulnerable patterns<br /> through 3.2.7 and in the reviewed upstream master snapshot. Impact
MITRE ATT&CK techniques
- VulnerabilitiesT1588.006
Original source: https://seclists.org/oss-sec/2026/q3/706