CVE-2026-5437: high-severity vulnerability in Orthanc DICOM Server
Out-of-Bounds Read in DicomStreamReader
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 0.7%
An out-of-bounds read vulnerability exists in `DicomStreamReader` during DICOM meta-header parsing. When processing malformed metadata structures, the parser may read beyond the bounds of the allocated metadata buffer. Although this issue does not typically crash the server or expose data directly to the attacker, it reflects insufficient input validation in the parsing logic.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Orthanc · DICOM ServerRelated CVEs — Orthanc DICOM Server
In the same product, most dangerous first.
CVE-2026-5445CRITICALOut-of-Bounds Read in DicomImageDecoder (DecodeLookupTable)EPSS 0.7%CVE-2026-5442CRITICALHeap Buffer Overflow in DICOM Image Decoder via VR UL DimensionsEPSS 0.6%CVE-2026-5440HIGHMemory Exhaustion via Unbounded Content-LengthEPSS 0.6%CVE-2026-5443CRITICALHeap Buffer Overflow in DICOM Image Decoder (Palette Color Decode)EPSS 0.6%CVE-2026-87020HIGHOrthanc DICOM Server Integer Overflow or WraparoundEPSS 0.6%CVE-2026-5438HIGHGzip Decompression Bomb via Content-Encoding HeaderEPSS 0.5%