Vulnerability in Orthanc Dicom Server
CVE-2026-5441
An out-of-bounds read vulnerability exists in the `DecodePsmctRle1` function of `DicomImageDecoder.cpp`. The `PMSCT_RLE1` decompression routine, which decodes the proprietary Philips Compression format, does not properly validate escape ma…
EPSS: 0.000 (3.5th percentile) — read the EPSS interpretation.
Affected products
- Orthanc Dicom Server — versions 0