CVE-2026-5445
Out-of-Bounds Read in DicomImageDecoder Palette Color Processing
Publication date: 2026-04-09
Last updated on: 2026-04-14
Assigner: CERT/CC
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| orthanc-server | orthanc | to 1.12.11 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an out-of-bounds read in the DecodeLookupTable function within DicomImageDecoder.cpp. Specifically, the decoding logic for PALETTE COLOR images does not check if pixel indices are within the size of the lookup table. If an image is crafted with indices larger than the palette size, the decoder reads memory beyond the allocated lookup table.
As a result, the decoder may expose heap memory contents in the output image, potentially leaking sensitive data.
How can this vulnerability impact me? :
This vulnerability can lead to exposure of unintended memory contents through the output image, which may include sensitive or confidential data stored in heap memory.
An attacker could exploit this by providing specially crafted PALETTE COLOR images that trigger the out-of-bounds read, potentially leading to information disclosure.