{"id":"CVE-2024-27628","details":"Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component.","modified":"2026-08-12T15:15:08.453019Z","published":"2024-06-28T00:00:00Z","related":["openSUSE-SU-2024:14514-1","openSUSE-SU-2025:0053-1"],"database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27628.json"},"references":[{"type":"WEB","url":"https://support.dcmtk.org/redmine/issues/1108"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27628.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27628"},{"type":"FIX","url":"https://github.com/DCMTK/dcmtk/commit/ec52e99e1e33fc39810560421c0833b02da567b3"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/dcmtk/dcmtk","events":[{"introduced":"59f75a8b50e50ae1bb1ff12098040c6327500740"},{"fixed":"ec52e99e1e33fc39810560421c0833b02da567b3"}],"database_specific":{"cpe":"cpe:2.3:a:offis:dcmtk:3.6.8:*:*:*:*:*:*:*","extracted_events":[{"introduced":"3.6.8"},{"last_affected":"3.6.8"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["3.6.8","DCMTK-3.6.8"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-27628.json","vanir_signatures_modified":"2026-08-12T15:15:08Z","vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://github.com/dcmtk/dcmtk/commit/ec52e99e1e33fc39810560421c0833b02da567b3","target":{"file":"dcmect/tests/tests.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["204700470389280200807070841246740560503","61202981732753408858422620467311607272"]},"id":"CVE-2024-27628-3157ef5d"},{"signature_version":"v1","source":"https://github.com/dcmtk/dcmtk/commit/ec52e99e1e33fc39810560421c0833b02da567b3","target":{"file":"dcmect/libsrc/enhanced_ct.cc"},"deprecated":false,"digest":{"line_hashes":["185380026879053939524332020298672580385","319115726796059695131724448623036982611","218581835887973571169760439157103449128","108125108876862493611763158797933895949","192239228801806753500367927955071657401","67729835086113099357512206467235773494","333809219029954011657732484272337019455","320999237033759826666582391997327085988","247745217991472886132457691633041388633","85386152398415621989247972389834465738"],"threshold":0.9},"id":"CVE-2024-27628-dce4861d","signature_type":"Line"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"}]}