VulnerabilityAnalyzed
CVE-2026-5442
A heap buffer overflow vulnerability exists in the DICOM image decoder.
CRITICAL 9.8EPSS 0.60%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.60%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A heap buffer overflow vulnerability exists in the DICOM image decoder. Dimension fields are encoded using Value Representation (VR) Unsigned Long (UL), instead of the expected VR Unsigned Short (US), which allows extremely large dimensions to be processed. This causes an integer overflow during frame size calculation and results in out-of-bounds memory access during image decoding.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.60% probability · 47th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-787
- Affected
- orthanc-server/orthanc
- Source
- cret@cert.org
References
- https://kb.cert.org/vuls/id/536588Third Party Advisory, VDB Entry
- https://www.machinespirits.de/Not Applicable
- https://www.orthanc-server.com/Product
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.