Understanding and Defending Against CVE-2026-97059: A Heap Over-Read Vulnerability in DCMTK
CVE-2026-97059 is a heap over-read vulnerability in DCMTK, a software toolkit for DICOM images. The vulnerability allows attackers to craft malicious DICOM instances that can crash the application or leak adjacent heap memory. This analysis provides an in-depth look at the vulnerability, its exploitation mechanics, and defensive strategies.