Heap Buffer Overflow in DICOM Image Decoder via VR UL Dimensions

Heap Buffer Overflow in DICOM Image Decoder (Palette Color Decode)

Orthanc server prior to version 1.5.8 does not enable basic authentication by default when remote access is enabled

Out-of-Bounds Read in DicomImageDecoder (DecodeLookupTable)

Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file system, and in specific deployment scenarios allows the…

Memory Exhaustion via Forged ZIP Metadata

Out-of-Bounds Read in DicomStreamReader

Gzip Decompression Bomb via Content-Encoding Header

Memory Exhaustion via Unbounded Content-Length

Heap Buffer Overflow in PAM Image Buffer Allocation

Out-of-Bounds Read in DicomImageDecoder (PMSCT_RLE1 Decompression)

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting (XSS) vulnerability

Orthanc versions before 1.12.10 are affected by an authorisation logic flaw in the application's HTTP Basic Authentication implementation