CVE-2026-5442 | A heap buffer overflow vulnerability exists in the DICOM ima… | CVSS 9.8 CRITICAL

Description

A heap buffer overflow vulnerability exists in the DICOM image decoder. Dimension fields are encoded using Value Representation (VR) Unsigned Long (UL), instead of the expected VR Unsigned Short (US), which allows extremely large dimensions to be processed. This causes an integer overflow during frame size calculation and results in out-of-bounds memory access during image decoding.

Metadata

CVE ID: CVE-2026-5442
State: PUBLISHED
Assigner: certcc
Reserved: 2026-04-02 19:22 UTC
Published: 2026-04-09 14:43 UTC
Last updated: 2026-04-14 16:34 UTC
Vendor / Product: Orthanc / DICOM Server
Sources: cve.org · NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: yes
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
Orthanc	DICOM Server	—	0 ≤ 1.12.10

Weakness (CWE)

CWE	Source	Description
—	cna	CWE-190 Integer Overflow or Wraparound

CVSS scores (1)

Score	Severity	Version	Source	Vector
9.8	CRITICAL	3.1	adp	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (3)