CVE-2026-5443 | A heap buffer overflow vulnerability exists during the decod… | CVSS 9.8 CRITICAL

Description

A heap buffer overflow vulnerability exists during the decoding of `PALETTE COLOR` DICOM images. Pixel length validation uses 32-bit multiplication for width and height calculations. If these values overflow, the validation check incorrectly succeeds, allowing the decoder to read and write to memory beyond allocated buffers.

Metadata

CVE ID: CVE-2026-5443
State: PUBLISHED
Assigner: certcc
Reserved: 2026-04-02 19:23 UTC
Published: 2026-04-09 14:43 UTC
Last updated: 2026-04-14 16:34 UTC
Vendor / Product: Orthanc / DICOM Server
Sources: cve.org · NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: yes
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
Orthanc	DICOM Server	—	0 ≤ 1.12.10

Weakness (CWE)

CWE	Source	Description
—	cna	CWE-190 Integer Overflow or Wraparound

CVSS scores (1)

Score	Severity	Version	Source	Vector
9.8	CRITICAL	3.1	adp	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (3)