DS
Product
DICOM Server
by Orthanc · last CVE Sep 11, 2026
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 0Low 1
Watch

Add DICOM Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-5442
9.8
1%
Apr 9
Heap Buffer Overflow in DICOM Image Decoder via VR UL Dimensions
Affected: through 1.12.10
CVE-2026-5443
9.8
1%
Apr 9
Heap Buffer Overflow in DICOM Image Decoder (Palette Color Decode)
Affected: through 1.12.10
CVE-2026-5445
9.1
1%
Apr 9
Out-of-Bounds Read in DicomImageDecoder (DecodeLookupTable)
Affected: through 1.12.10
CVE-2026-87020
8.1
1%
Sep 11
Orthanc DICOM Server Integer Overflow or Wraparound
Affected: before 1.13.0
CVE-2026-5439
7.5
0%
Apr 9
Memory Exhaustion via Forged ZIP Metadata
Affected: through 1.12.10
CVE-2026-5437
7.5
1%
Apr 9
Out-of-Bounds Read in DicomStreamReader
Affected: through 1.12.10
CVE-2026-5438
7.5
0%
Apr 9
Gzip Decompression Bomb via Content-Encoding Header
Affected: through 1.12.10
CVE-2026-5440
7.5
1%
Apr 9
Memory Exhaustion via Unbounded Content-Length
Affected: through 1.12.10
CVE-2026-5444
7.1
0%
Apr 9
Heap Buffer Overflow in PAM Image Buffer Allocation
Affected: through 1.12.10
CVE-2026-5441
7.1
0%
Apr 9
Out-of-Bounds Read in DicomImageDecoder (PMSCT_RLE1 Decompression)
Affected: through 1.12.10
CVE-2026-10528
3.3
0%
Jun 2
Orthanc DICOM Server DCMTK FromDcmtkBridge.cpp read stack-based overflow
Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +6 more
Showing 11