Advisories » MGASA-2026-0040

Updated dcmtk packages fix security vulnerabilities

Publication date: 16 Feb 2026
Modification date: 16 Feb 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-14607 , CVE-2025-14841

Description

OFFIS DCMTK dcmdata dcbytstr.cc makeDicomByteString memory corruption.
(CVE-2025-14607)
OFFIS DCMTK dcmqrscp dcmqrdbi.cc startMoveRequest null pointer
dereference. (CVE-2025-14841)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=34946
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/WA2BG2LFPVCYESQA5KLHS3YDK74NTELX/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14607
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14841

SRPMS

9/core

• dcmtk-3.6.7-4.7.mga9