CVE-2026-87020

HighCVSS 8.1

Published: 11/09/2026(UTC)Updated: 18/09/2026(UTC)Translated: 11/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.56%

45th percentile - higher than 45% of all known CVEs

Summary

An integer overflow in pitch and buffer-size computation in Orthanc DICOM Server leads to a heap out-of-bounds write when decoding an attacker-supplied PNG. This could result in arbitrary code execution or a service crash.

Risk Assessment

An attacker could remotely exploit the vulnerability by submitting a specially crafted PNG file, potentially leading to code execution or server crash. The risk affects systems processing medical images in DICOM format.

Recommendation

Update Orthanc DICOM Server to the latest patched version. Restrict the ability to upload untrusted PNG files to the server.

Other vulnerabilities in Orthanc DICOM Server

CVE-2026-10528Low
Vulnerability in Orthanc DICOM Server up to version 1.12.11 in the DcmItem::read function of the DCMTK Parser component causes a stack-based buffer overflow via a local attack. Exploit has been published.

Original NVD description (English source)

An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS