CVE-2026-5442 Heap Buffer Overflow in DICOM Image Decoder via VR UL Dimensions

A heap buffer overflow vulnerability exists in the DICOM image decoder. Dimension fields are encoded using Value Representation VR Unsigned Long UL, instead of the expected VR Unsigned Short US, which allows extremely large dimensions to be processed. This causes an integer overflow during frame...

CVE-2026-5442

A heap buffer overflow vulnerability exists in the DICOM image decoder used by Orthanc , a free open-source software. The root cause is that dimension fields are encoded using Value Representation (VR) Unsigned Long (UL) instead of the expected Unsigned Short (US) . This allows for the processing...