Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/gdcm@3.0.8-2
purl pkg:deb/debian/gdcm@3.0.8-2
Next non-vulnerable version 3.0.24-9
Latest non-vulnerable version 3.0.24-9
Risk 3.6
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-3fc5-33n7-pkeq
Aliases:
CVE-2025-11266
GDCM: Grassroots DICOM: Grassroots DICOM (GDCM): Denial of Service via malformed DICOM file parsing
3.0.24-9
Affected by 0 other vulnerabilities.
VCID-6xue-7ryt-9fa3
Aliases:
CVE-2024-25569
An out-of-bounds read vulnerability exists in the RAWCodec::DecodeBytes functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted DICOM file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability.
3.0.24-5
Affected by 1 other vulnerability.
VCID-m1ah-vyz4-57dc
Aliases:
CVE-2024-22391
A heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
3.0.24-5
Affected by 1 other vulnerability.
VCID-sgsd-p8ts-r7gn
Aliases:
CVE-2024-22373
An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted DICOM file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
3.0.24-5
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-13T09:16:09.393634+00:00 Debian Importer Affected by VCID-m1ah-vyz4-57dc https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:49:49.519166+00:00 Debian Importer Affected by VCID-3fc5-33n7-pkeq https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:32:08.543987+00:00 Debian Importer Affected by VCID-sgsd-p8ts-r7gn https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:07:42.108752+00:00 Debian Importer Affected by VCID-6xue-7ryt-9fa3 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-08T20:09:23.407810+00:00 Debian Importer Affected by VCID-m1ah-vyz4-57dc https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-08T19:52:33.901387+00:00 Debian Importer Affected by VCID-3fc5-33n7-pkeq https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-04T18:12:06.672687+00:00 Debian Importer Affected by VCID-sgsd-p8ts-r7gn https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-04T17:57:32.735173+00:00 Debian Importer Affected by VCID-6xue-7ryt-9fa3 https://security-tracker.debian.org/tracker/data/json 38.1.0