CVE-2026-44038 | OFFIS DCMTK 3.7.0 Huffman decoder extend_test/extend_offset out-of-bounds

October 8, 2026 Yanac

A vulnerability marked as critical has been reported in OFFIS DCMTK 3.7.0. Affected by this vulnerability is an unknown functionality of the component Huffman decoder. The manipulation of the argument extend_test/extend_offset leads to out-of-bounds read.

This vulnerability is traded as CVE-2026-44038. It is possible to initiate the attack remotely. There is no exploit available.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More