CVE-2026-5437: CWE-125 Out-of-bounds Read in Orthanc DICOM Server
An out-of-bounds read vulnerability exists in `DicomStreamReader` during DICOM meta-header parsing. When processing malformed metadata structures, the parser may read beyond the bounds of the allocated metadata buffer. Although this issue does not typically crash the server or expose data directly to the attacker, it reflects insufficient input validation in the parsing logic.
AI Analysis
Technical Summary
This vulnerability involves an out-of-bounds read (CWE-125) in the Orthanc DICOM Server's DicomStreamReader when processing malformed DICOM meta-header metadata. The parser may read memory beyond the allocated metadata buffer, reflecting inadequate input validation. Although this flaw does not usually lead to server crashes or direct data leaks, it represents a potential stability and security concern. The issue affects the Orthanc DICOM Server, with no specific affected versions detailed beyond a placeholder. No CVSS score or official remediation level has been provided. The CERT advisory linked does not specify a patch or mitigation.
Potential Impact
The vulnerability may cause the Orthanc DICOM Server to read memory beyond intended bounds during malformed metadata parsing. This could potentially affect server stability but is not reported to cause crashes or direct data exposure. There are no known active exploits in the wild. The impact is limited to potential memory safety concerns without confirmed exploitation consequences.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory at https://kb.cert.org/vuls/id/536588 for current remediation guidance. Until an official fix is available, cautious handling of untrusted DICOM metadata inputs is advisable. No vendor-provided mitigation or temporary fix is currently documented.
CVE-2026-5437: CWE-125 Out-of-bounds Read in Orthanc DICOM Server
Description
An out-of-bounds read vulnerability exists in `DicomStreamReader` during DICOM meta-header parsing. When processing malformed metadata structures, the parser may read beyond the bounds of the allocated metadata buffer. Although this issue does not typically crash the server or expose data directly to the attacker, it reflects insufficient input validation in the parsing logic.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves an out-of-bounds read (CWE-125) in the Orthanc DICOM Server's DicomStreamReader when processing malformed DICOM meta-header metadata. The parser may read memory beyond the allocated metadata buffer, reflecting inadequate input validation. Although this flaw does not usually lead to server crashes or direct data leaks, it represents a potential stability and security concern. The issue affects the Orthanc DICOM Server, with no specific affected versions detailed beyond a placeholder. No CVSS score or official remediation level has been provided. The CERT advisory linked does not specify a patch or mitigation.
Potential Impact
The vulnerability may cause the Orthanc DICOM Server to read memory beyond intended bounds during malformed metadata parsing. This could potentially affect server stability but is not reported to cause crashes or direct data exposure. There are no known active exploits in the wild. The impact is limited to potential memory safety concerns without confirmed exploitation consequences.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory at https://kb.cert.org/vuls/id/536588 for current remediation guidance. Until an official fix is available, cautious handling of untrusted DICOM metadata inputs is advisable. No vendor-provided mitigation or temporary fix is currently documented.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- certcc
- Date Reserved
- 2026-04-02T19:21:45.325Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://kb.cert.org/vuls/id/536588","vendor":"CERT"}]
Threat ID: 69d7bccb1cc7ad14dad7b13d
Added to database: 4/9/2026, 2:50:51 PM
Last enriched: 4/9/2026, 3:06:32 PM
Last updated: 4/10/2026, 8:17:15 AM
Views: 11
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.