CyberSIXT Search
NVD
7.5 High
CVE-2026-5437

Out-of-Bounds Read in DicomStreamReader

OrthancDICOM Server

Status
  • Not in CISA KEV
Exploit probabilityEPSSchecked 25 Oct
0.6%probability of exploitation in the next 30 days

Higher than 50% of scored CVEs

SeverityCVSS
7.5High

Description NVD

An out-of-bounds read vulnerability exists in `DicomStreamReader` during DICOM meta-header parsing. When processing malformed metadata structures, the parser may read beyond the bounds of the allocated metadata buffer. Although this issue does not typically crash the server or expose data directly to the attacker, it reflects insufficient input validation in the parsing logic.

Coverage 1 article · 1 outlet

First in our coverage: SecurityWeek, 10 AprRSS feed
  1. Nine Orthanc DICOM bugs riskSecurityWeek · first in our coverage

References

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device