CVE-2026-5441: Out-of-Bounds Read in DicomImageDecoder (PMSCT_RLE1 Decompression)
An out-of-bounds read vulnerability exists in the DecodePsmctRle1 function of DicomImageDecoder.cpp. The PMSCTRLE1 decompression routine, which decodes the proprietary Philips Compression format, does not properly validate escape markers placed near the end of the compressed data stream. A crafted sequence at the end of the buffer can cause the decoder to read beyond the allocated memory region and leak heap data into the rendered image output.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5441?
CVE-2026-5441 has a moderate severity rating due to potential exploitation leading to information leaks.
How do I fix CVE-2026-5441?
To fix CVE-2026-5441, update to the latest version of Orthanc server that addresses the out-of-bounds read vulnerability.
What software is affected by CVE-2026-5441?
CVE-2026-5441 affects versions of Orthanc server prior to 1.12.11.
What is the impact of CVE-2026-5441?
The impact of CVE-2026-5441 includes potential unauthorized access to sensitive information due to out-of-bounds reads.
Is CVE-2026-5441 an easily exploitable vulnerability?
CVE-2026-5441 may require specific conditions to be exploited, making it moderately difficult to exploit without proper knowledge.