CVE-2022-2119

CVE-2022-2119 is a critical path traversal vulnerability affecting all versions of OFFIS DCMTK prior to 3.6.7. This flaw allows an unauthenticated attacker to write DICOM files to arbitrary directories with controlled names, potentially leading to remote code execution. With a CVSS score of 9.8, it is easily exploitable over the network with no user interaction required, resulting in complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or publicly available exploit code, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.