Threats affecting pkg:github/cisagov/gdcm

CVE-2026-3650 is a high-severity memory leak vulnerability in the Grassroots DICOM library (GDCM) version 3.2.2. It occurs when parsing malformed DICOM files containing non-standard VR types in the file meta information. This flaw causes excessive memory allocation without proper release, potentially leading to resource exhaustion and denial-of-service conditions. There are no known exploits in the wild, and no official patch or remediation has been documented yet.