CVE-2026-5444Disclosure(orthanc-server / orthanc)

LOWCVSS 7.1 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A heap buffer overflow vulnerability exists in the PAM image parsing logic. When Orthanc processes a crafted PAM image embedded in a DICOM file, image dimensions are multiplied using 32-bit unsigned arithmetic. Specially chosen values can cause an integer overflow during buffer size calculation, resulting in the allocation of a small buffer followed by a much larger write operation during pixel processing.

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • orthanc

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Products
orthanc

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-04-09: 2Technical Details · 2026-04-09: 204-09
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-5444 Heap Buffer Overflow in Orthanc PAM Image Parsing via Integer Overflow https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5444

    Post summary

    The content announces CVE-2026-5444, detailing a heap buffer overflow caused by an integer overflow in Orthanc's image parsing, with no PoC, exploit code, or patch information provided.

    0000038
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-5444 A heap buffer overflow vulnerability exists in the PAM image parsing logic. When Orthanc processes a crafted PAM image embedded in a DICOM file, image dimensions are mu… https://www.cve.org/CVERecord?id=CVE-2026-5444

    Post summary

    The text announces CVE-2026-5444, detailing a heap buffer overflow in Orthanc’s PAM image parser, with no PoC, exploit, or patch information provided.

    00000133
    57.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apporthanc-serverorthanc---

Explore more