Back to search
CVE-2026-5437
Published: Apr 9, 2026
Modified: Apr 14, 2026
PUBLISHED
Description
An out-of-bounds read vulnerability exists in `DicomStreamReader` during DICOM meta-header parsing. When processing malformed metadata structures, the parser may read beyond the bounds of the allocated metadata buffer. Although this issue does not typically crash the server or expose data directly to the attacker, it reflects insufficient input validation in the parsing logic.
| Vendor | Product | Versions |
|---|---|---|
Orthanc | DICOM Server | affected 0 - <= 1.12.10 |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now