CVE catalog

CVE-2026-5441

Severity: High · CVSS 7.1CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Published: Apr 9, 2026, 3:16:16 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.14% · Oct 25, 2026

An out-of-bounds read vulnerability exists in the `DecodePsmctRle1` function of `DicomImageDecoder.cpp`. The `PMSCT_RLE1` decompression routine, which decodes the proprietary Philips Compression format, does not properly validate escape markers placed near the end of the compressed data stream. A crafted sequence at the end of the buffer can cause the decoder to read beyond the allocated memory region and leak heap data into the rendered image output.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	orthanc	sid	`1.13.0+dfsg-1`	fixed
Debian	orthanc	forky	`1.13.0+dfsg-1`	fixed
Debian	orthanc	trixie	`1.12.7+dfsg-4`	vulnerable
Debian	orthanc	bookworm	`1.10.1+dfsg-2+deb12u1`	vulnerable
Debian	orthanc	bookworm-security	`1.10.1+dfsg-2+deb12u1`	vulnerable
Cpe	orthanc	Not reported	Not reported	vulnerable
Cpe	orthanc	Not reported	`1.12.11`	fixed
Cpe	orthanc	Not reported	`1.12.11`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	orthanc	source	sid	`1.12.10+dfsg-4`	not yet assigned	Not reported	[1133182]
Debian	orthanc	source	forky	`1.12.10+dfsg-4`	not yet assigned	Not reported	[1133182]
Debian	orthanc	source	trixie	`(unfixed)`	not yet assigned	Not reported	[1133182]
Debian	orthanc	source	bookworm	`(unfixed)`	not yet assigned	Not reported	[1133182]
Cpe	orthanc	cpe	Not reported	`1.12.11`	Not reported	Not reported	Not reported
Cpe	orthanc	cpe	Not reported	`1.12.11`	Not reported	NVD-CVE-2026-5441	Not reported

[Debian bug #1133182]

Notes

[trixie] orthanc: Minor issue [bookworm] orthanc: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[liborthancframework1]Affected
Source package: [orthanc]
Details (4)
- 1.10.1+dfsg-2+deb12u1 · amd64 · bookworm
  Affected
  nvd · orthanc · debian · bookworm; nvd · orthanc · debian · 12
- 1.10.1+dfsg-2+deb12u1 · arm64 · bookworm
  Affected
  nvd · orthanc · debian · bookworm; nvd · orthanc · debian · 12
- 1.10.1+dfsg-2+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · orthanc · debian · bookworm; nvd · orthanc · debian · 12
- 1.10.1+dfsg-2+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · orthanc · debian · bookworm; nvd · orthanc · debian · 12
[liborthancframework-dev]Affected
Source package: [orthanc]
Details (4)
- 1.10.1+dfsg-2+deb12u1 · amd64 · bookworm
  Affected
  nvd · orthanc · debian · bookworm; nvd · orthanc · debian · 12
- 1.10.1+dfsg-2+deb12u1 · arm64 · bookworm
  Affected
  nvd · orthanc · debian · bookworm; nvd · orthanc · debian · 12
- 1.10.1+dfsg-2+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · orthanc · debian · bookworm; nvd · orthanc · debian · 12
- 1.10.1+dfsg-2+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · orthanc · debian · bookworm; nvd · orthanc · debian · 12
[orthanc]Affected
Details (4)
- 1.10.1+dfsg-2+deb12u1 · amd64 · bookworm
  Affected
  nvd · orthanc · debian · bookworm; nvd · orthanc · debian · 12
- 1.10.1+dfsg-2+deb12u1 · arm64 · bookworm
  Affected
  nvd · orthanc · debian · bookworm; nvd · orthanc · debian · 12
- 1.10.1+dfsg-2+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · orthanc · debian · bookworm; nvd · orthanc · debian · 12
- 1.10.1+dfsg-2+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · orthanc · debian · bookworm; nvd · orthanc · debian · 12
[orthanc-dev]Affected
Source package: [orthanc]
Details (4)
- 1.10.1+dfsg-2+deb12u1 · amd64 · bookworm
  Affected
  nvd · orthanc · debian · bookworm; nvd · orthanc · debian · 12
- 1.10.1+dfsg-2+deb12u1 · arm64 · bookworm
  Affected
  nvd · orthanc · debian · bookworm; nvd · orthanc · debian · 12
- 1.10.1+dfsg-2+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · orthanc · debian · bookworm; nvd · orthanc · debian · 12
- 1.10.1+dfsg-2+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · orthanc · debian · bookworm; nvd · orthanc · debian · 12
[orthanc-doc]Affected
Source package: [orthanc]
Details (4)
- 1.10.1+dfsg-2+deb12u1 · all · bookworm
  Affected
  nvd · orthanc · debian · bookworm; nvd · orthanc · debian · 12
- 1.10.1+dfsg-2+deb12u1 · all · bookworm
  Affected
  nvd · orthanc · debian · bookworm; nvd · orthanc · debian · 12
- 1.10.1+dfsg-2+deb12u1 · all · bookworm-security
  Affected
  nvd · orthanc · debian · bookworm; nvd · orthanc · debian · 12
- 1.10.1+dfsg-2+deb12u1 · all · bookworm-security
  Affected
  nvd · orthanc · debian · bookworm; nvd · orthanc · debian · 12

[Debian 13 (Trixie)]

[liborthancframework1]Affected
Source package: [orthanc]
Details (2)
- 1.12.7+dfsg-4 · amd64 · trixie
  Affected
  nvd · orthanc · debian · 13
- 1.12.7+dfsg-4 · arm64 · trixie
  Affected
  nvd · orthanc · debian · 13
[liborthancframework-dev]Affected
Source package: [orthanc]
Details (2)
- 1.12.7+dfsg-4 · amd64 · trixie
  Affected
  nvd · orthanc · debian · 13
- 1.12.7+dfsg-4 · arm64 · trixie
  Affected
  nvd · orthanc · debian · 13
[orthanc]Affected
Details (2)
- 1.12.7+dfsg-4 · amd64 · trixie
  Affected
  nvd · orthanc · debian · 13
- 1.12.7+dfsg-4 · arm64 · trixie
  Affected
  nvd · orthanc · debian · 13
[orthanc-dev]Affected
Source package: [orthanc]
Details (2)
- 1.12.7+dfsg-4 · amd64 · trixie
  Affected
  nvd · orthanc · debian · 13
- 1.12.7+dfsg-4 · arm64 · trixie
  Affected
  nvd · orthanc · debian · 13
[orthanc-doc]Affected
Source package: [orthanc]
Details (2)
- 1.12.7+dfsg-4 · all · trixie
  Affected
  nvd · orthanc · debian · 13
- 1.12.7+dfsg-4 · all · trixie
  Affected
  nvd · orthanc · debian · 13

Observed: Oct 26, 2026, 9:21:10 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database]