CVE-2026-5445
Last modified
CVE-2026-5445 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. An out-of-bounds read vulnerability exists in the `DecodeLookupTable` function within `DicomImageDecoder.cpp`. The lookup-table decoding logic used for `PALETTE COLOR` images does not validate pixel indices against the lookup table size. EPSS estimates a 0.67% chance of exploitation in the next 30 days.
Description
An out-of-bounds read vulnerability exists in the `DecodeLookupTable` function within `DicomImageDecoder.cpp`. The lookup-table decoding logic used for `PALETTE COLOR` images does not validate pixel indices against the lookup table size. Crafted images containing indices larger than the palette size cause the decoder to read beyond allocated lookup table memory and expose heap contents in the output image.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Orthanc-Server | Orthanc | < 1.12.11 |
References
- https://kb.cert.org/vuls/id/536588Third Party Advisory, VDB Entry
- https://www.machinespirits.de/Not Applicable
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-5445?
How severe is CVE-2026-5445?
How do I fix CVE-2026-5445?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-54433In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, t…10
- CVE-2026-5444A heap buffer overflow vulnerability exists in the PAM image…7.1
- CVE-2026-54443Dashy is a self-hostable personal dashboard. From 1.9.4 unti…5.9
- CVE-2026-54444Rejected reason: ]** REJECT ** DO NOT USE THIS CANDIDATE NUM…
- CVE-2026-54445vantage6 is an open-source infrastructure for privacy preser…6.9
- CVE-2026-54448Trivy is a security scanner. Prior to 0.71.0, when Trivy sca…6.5
- CVE-2026-54458WWBN AVideo is an open source video platform. Versions prior…9.6
- CVE-2026-5446In wolfSSL, ARIA-GCM cipher suites used in TLS 1.2 and DTLS …7.1
- CVE-2026-54463websocket-driver is a WebSocket protocol handler with plugga…7.5
- CVE-2026-54464### Impact If this library is used in tandem with the `perm…6.3
- CVE-2026-54465websocket-driver is a WebSocket protocol handler with plugga…7.5
- CVE-2026-54466websocket-driver is a WebSocket protocol handler with plugga…7.5
Are you affected by CVE-2026-5445?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST