Vulnerability in Orthanc Dicom Server

CVE-2026-5440

A memory exhaustion vulnerability exists in the HTTP server due to unbounded use of the `Content-Length` header. The server allocates memory directly based on the attacker supplied header value without enforcing an upper limit. A crafted…

EPSS: 0.019 (83.5th percentile) — read the EPSS interpretation.

Affected products

References