CVE-2026-107621: J4Care dcm4che Loop with Unreachable Exit Condition
Published Oct 16, 2026
·Updated
JPEGParser can enter an infinite loop while parsing a specially crafted or truncated stream.
Affected Software
1 affected component
J4Care dcm4che
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
J4Care dcm4cheto a version that resolves this vulnerability.Fixed in 5.35.2
Event History
Oct 16, 2026
CVE Published
via MITRE·02:19 PM
Data Sourced
via MITRE·02:19 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
An attacker needs to supply a specially crafted or truncated JPEG stream to the affected JPEGParser. No privileges or user interaction are required, and the issue is reachable over the network.
2
What is the likely impact of successful exploitation?
The parser can enter an infinite loop, causing a denial of service. The provided vector indicates availability impact only, with no stated confidentiality or integrity impact.