Fixed issue with invalid "YBR_FULL" DICOM images.
authorJoerg Riesmeier <dicom@jriesmeier.com>
Wed, 10 Dec 2025 21:34:17 +0000 (22:34 +0100)
committerÉtienne Mollier <emollier@debian.org>
Wed, 10 Dec 2025 21:34:17 +0000 (22:34 +0100)
commit9ce51ee9186165cd8d059bd72521a4bc8fc14014
tree6b31c25fe7b7764a7c867ada478df5b7db8130c6
parent37b12290cdf79d4649512ad7f5cd3d27fe8d1c86
Fixed issue with invalid "YBR_FULL" DICOM images.

Applied-Upstream: 7ad81d69b19714936e18ea5fc74edaeb9f021ce7
Reviewed-By: Étienne Mollier <emollier@debian.org>
Last-Update: 2025-08-15

Fixed an issue when processing an invalid DICOM image with a Photometric
Interpretation of "YBR_FULL" and a Planar Configuration of "1" where
the number of pixels stored does not match the expected number of pixels
(much too less). Now, the pixel data of such an image is not processed
at all, but an empty image (black pixels) is created instead. The user
is warned about this by an appropriate log message.

Thanks to Ding zhengzheng <xiaozheng.ding399@gmail.com> for the report
and the sample file (PoC).

Gbp-Pq: Name 0013-CVE-2025-9732.patch
dcmimage/include/dcmtk/dcmimage/dicopxt.h
dcmimage/include/dcmtk/dcmimage/diybrpxt.h
dcmimgle/libsrc/dcmimage.cc