An out-of-bounds read vulnerability exists in the function of .

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 9, 2026 · NIST NVD

   Detected

   An out-of-bounds read vulnerability exists in the function of . The decompression routine, which decodes the proprietary Philips Compression format, does not properly validate escape markers placed near the end of the compressed data stream. A crafted sequence at the end of the buffer can cause the decoder to read beyond the allocated memory region and leak heap data into the rendered image output

2. Jun 17, 2026 · NIST NVD

   Updated

   An out-of-bounds read vulnerability exists in the function of . The decompression routine, which decodes the proprietary Philips Compression format, does not properly validate escape markers placed near the end of the compressed data stream. A crafted sequence at the end of the buffer can cause the decoder to read beyond the allocated memory region and leak heap data into the rendered image output

Affected

• cpe orthanc-server/orthancversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-5441

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-5441

  An out-of-bounds read vulnerability exists in the function of . The decompression routine, which decodes the proprietary Philips Compression format, does not properly validate escape markers placed near the end of the compress

  nvd.nist.gov

References

• Third Party Advisory · kb.cert.org
• Not Applicable · machinespirits.de
• Product · orthanc-server.com