Vulnerabilities in Orthanc
13 resultsCVE-2025-0896CRITICALOrthanc Server Missing Authentication for Critical FunctionEPSS 2.4%CVE-2026-5445CRITICALOut-of-Bounds Read in DicomImageDecoder (DecodeLookupTable)EPSS 0.7%CVE-2026-5437HIGHOut-of-Bounds Read in DicomStreamReaderEPSS 0.6%CVE-2026-5442CRITICALHeap Buffer Overflow in DICOM Image Decoder via VR UL DimensionsEPSS 0.6%CVE-2026-5443CRITICALHeap Buffer Overflow in DICOM Image Decoder (Palette Color Decode)EPSS 0.6%CVE-2026-5440HIGHMemory Exhaustion via Unbounded Content-LengthEPSS 0.6%CVE-2026-5438HIGHGzip Decompression Bomb via Content-Encoding HeaderEPSS 0.5%CVE-2026-5439HIGHMemory Exhaustion via Forged ZIP MetadataEPSS 0.4%CVE-2023-7238HIGHImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Orthanc Osimis DICOM Web ViewerEPSS 0.3%CVE-2026-10173MEDIUMOrthanc Explorer 2 URL StudyList.vue cross site scriptingEPSS 0.3%CVE-2026-5444HIGHHeap Buffer Overflow in PAM Image Buffer AllocationEPSS 0.2%CVE-2026-5441HIGHOut-of-Bounds Read in DicomImageDecoder (PMSCT_RLE1 Decompression)EPSS 0.1%CVE-2026-10528MEDIUMOrthanc DICOM Server DCMTK FromDcmtkBridge.cpp read stack-based overflowEPSS 0.1%