CVE-2026-5437: Out-of-Bounds Read in DicomStreamReader
An out-of-bounds read vulnerability exists in DicomStreamReader during DICOM meta-header parsing. When processing malformed metadata structures, the parser may read beyond the bounds of the allocated metadata buffer. Although this issue does not typically crash the server or expose data directly to the attacker, it reflects insufficient input validation in the parsing logic.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5437?
CVE-2026-5437 has been classified as a moderate severity vulnerability due to its potential impact on system stability.
How do I fix CVE-2026-5437?
To fix CVE-2026-5437, ensure that you update Orthanc to version 1.12.11 or later.
What software is affected by CVE-2026-5437?
CVE-2026-5437 affects Orthanc Server versions prior to 1.12.11.
What type of vulnerability is CVE-2026-5437?
CVE-2026-5437 is classified as an out-of-bounds read vulnerability.
Can CVE-2026-5437 lead to data breaches?
While CVE-2026-5437 does not typically lead to data breaches, it can compromise system integrity under certain conditions.