Vulnerability in Orthanc Dicom Server
CVE-2026-5440
A memory exhaustion vulnerability exists in the HTTP server due to unbounded use of the `Content-Length` header. The server allocates memory directly based on the attacker supplied header value without enforcing an upper limit. A crafted…
EPSS: 0.019 (83.5th percentile) — read the EPSS interpretation.
Affected products
- Orthanc Dicom Server — versions 0