CVE-2026-5443
Heap Buffer Overflow in DICOM Image Decoder (Palette Color Decode)
CVSS Score
9.8
EPSS Score
0.0%
EPSS Percentile
0th
A heap buffer overflow vulnerability exists during the decoding of `PALETTE COLOR` DICOM images. Pixel length validation uses 32-bit multiplication for width and height calculations. If these values overflow, the validation check incorrectly succeeds, allowing the decoder to read and write to memory beyond allocated buffers.
| Vendor | orthanc |
| Product | dicom server |
| Published | Apr 9, 2026 |
| Last Updated | Apr 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for orthanc dicom server
Be the first to know when new critical vulnerabilities affecting orthanc dicom server are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Orthanc / DICOM Server
0 ≤ 1.12.10