This vulnerability (CWE-401) in the OFFIS DICOM DCMTK Toolkit allows an unauthenticated remote attacker to cause a memory leak by sending crafted connection requests. The memory leak occurs because allocated memory is not properly released after its effective lifetime. In single-process deployments, this leads to continuous memory growth, eventually causing the service to be killed and the network port to stop responding until the service is restarted. The CVSS 4.0 score is 8.7, indicating high severity with network attack vector, no privileges or user interaction required, and high impact on availability. No patch or official remediation level is currently available, and no known exploits are reported in the wild.

The vulnerability can cause denial of service by exhausting memory resources on the affected system, leading to service termination and unavailability of the network port until a manual restart is performed. This impacts the availability of the DCMTK Toolkit service, potentially disrupting dependent medical imaging workflows.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider deploying the DCMTK Toolkit in multi-process or containerized environments to limit the impact of memory exhaustion. Monitor service stability and be prepared to restart the service if it becomes unresponsive due to memory exhaustion.