Vulnerability in Orthanc Dicom Server
CVE-2026-5437
An out-of-bounds read vulnerability exists in `DicomStreamReader` during DICOM meta-header parsing. When processing malformed metadata structures, the parser may read beyond the bounds of the allocated metadata buffer. Although this issue…
EPSS: 0.001 (18.0th percentile) — read the EPSS interpretation.
Affected products
- Orthanc Dicom Server — versions 0