Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/gdcm@2.6.6-3
purl pkg:deb/debian/gdcm@2.6.6-3
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-f2hr-w48s-k3ha Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows attackers to execute arbitrary code via crafted header dimensions in a DICOM image file, which triggers a buffer overflow. CVE-2015-8396
VCID-fz53-7wyn-qubv The JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (application crash) via an embedded JPEG-LS image with dimensions larger than the selected region in a (1) two-dimensional or (2) three-dimensional DICOM image file, which triggers an out-of-bounds read. CVE-2015-8397

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-15T16:29:53.016781+00:00 Debian Oval Importer Fixing VCID-fz53-7wyn-qubv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:43:49.606996+00:00 Debian Oval Importer Fixing VCID-f2hr-w48s-k3ha https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-11T16:17:00.408502+00:00 Debian Oval Importer Fixing VCID-fz53-7wyn-qubv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:31:35.658302+00:00 Debian Oval Importer Fixing VCID-f2hr-w48s-k3ha https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-08T16:09:10.171418+00:00 Debian Oval Importer Fixing VCID-fz53-7wyn-qubv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:25:48.419683+00:00 Debian Oval Importer Fixing VCID-f2hr-w48s-k3ha https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0