CVE-2026-105273: J4Care dcm4che Loop with Unreachable Exit Condition

Published Oct 16, 2026

Updated

MP4Parser does not adequately validate MP4 box sizes. A malformed box can cause parsing to make no forward progress and repeatedly process the same input.

Affected Software

1 affected component

J4Care dcm4che

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade J4Care dcm4che to a version that resolves this vulnerability.
Fixed in 5.35.2

Event History

Oct 16, 2026

CVE Published

via MITRE·02:21 PM

Data Sourced

via MITRE·02:21 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The vulnerability is network-accessible and has low attack complexity. It requires no privileges and no user interaction.

What is the expected impact of successful exploitation?

Successful exploitation can cause an availability impact by making parsing repeatedly process the same input. The supplied severity vector indicates no confidentiality or integrity impact.