CVE-2026-101021: J4Care dcm4che Inefficient Algorithmic Complexity
Published Oct 16, 2026
·Updated
MultipartInputStream performs inefficient boundary matching and unnecessary buffer copying. Crafted multipart input can force excessive boundary comparisons and repeated copying.
Affected Software
1 affected component
J4Care dcm4che
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
J4Care dcm4cheto a version that resolves this vulnerability.Fixed in 5.35.2
Event History
Oct 16, 2026
CVE Published
via MITRE·02:28 PM
Data Sourced
via MITRE·02:28 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Who is exposed to exploitation?
Systems that accept multipart input over the network are exposed. The CVSS vector indicates the issue is remotely reachable, requires no privileges, and does not require user interaction.
2
What does an attacker need to do?
An attacker needs to send crafted multipart input designed to trigger excessive boundary comparisons and repeated buffer copying. The stated impact is availability loss; no confidentiality or integrity impact is identified.