Description
An out-of-bounds read vulnerability exists in the `DecodeLookupTable` function within `DicomImageDecoder.cpp`. The lookup-table decoding logic used for `PALETTE COLOR` images does not validate pixel indices against the lookup table size. Crafted images containing indices larger than the palette size cause the decoder to read beyond allocated lookup table memory and expose heap contents in the output image.
INFO
Published Date :
2026-04-09T14:42:51.673Z
Last Modified :
2026-04-09T14:42:51.673Z
Source :
certcc
AFFECTED PRODUCTS
The following products are affected by CVE-2026-5445 vulnerability.
| Vendors | Products |
|---|---|
| Orthanc |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2026-5445.
