CVE-2026-5442

The CVE-2026-5442 entry describes a heap buffer overflow in a DICOM image decoder caused by mis-encoding of dimension fields: VR_UL is used instead of US, enabling extremely large dimensions to pass validation. This leads to an integer overflow during frame size calculation and results in out-of-...

PT-2026-31630

An out-of-bounds read vulnerability exists in the DecodePsmctRle1 function of DicomImageDecoder.cpp. The PMSCT RLE1 decompression routine, which decodes the proprietary Philips Compression format, does not properly validate escape markers placed near the end of the compressed data stream. A craft...