by Kastro
Paper/Archive/CVE-2026-5443

CVE-2026-5443

Orthanc DICOM Server — Heap Buffer Overflow in DICOM Image Decoder (Palette Color Decode)

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 47.2.472 × 209.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A heap buffer overflow vulnerability exists during the decoding of `PALETTE COLOR` DICOM images. Pixel length validation uses 32-bit multiplication for width and height calculations. If these values overflow, the validation check incorrectly succeeds, allowing the decoder to read and write to memory beyond allocated buffers.

Affected

ProductAffectedFixed inSource
DICOM Server≤ 1.12.10–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

reforthanc-server.comrefmachinespirits.derefkb.cert.org/vuls/id/536588