CVE-2020-36855 | DCMTK up to 3.6.5 dcmqrscp parseQuota StorageQuota stack-based overflow (ID 1026 / 0fef9f02e)

A vulnerability classified as critical has been found in DCMTK up to 3.6.5. The affected element is the function parseQuota of the component dcmqrscp. The manipulation of the argument StorageQuota leads to stack-based buffer overflow.

This vulnerability is uniquely identified as CVE-2020-36855. Local access is required to approach this attack. Moreover, an exploit is present.

It is recommended to upgrade the affected component.