An out-of-bounds read vulnerability exists in the function within .

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 9, 2026 · NIST NVD

   Detected

   An out-of-bounds read vulnerability exists in the function within . The lookup-table decoding logic used for images does not validate pixel indices against the lookup table size. Crafted images containing indices larger than the palette size cause the decoder to read beyond allocated lookup table memory and expose heap contents in the output image.

2. Jun 17, 2026 · NIST NVD

   Updated

   An out-of-bounds read vulnerability exists in the function within . The lookup-table decoding logic used for images does not validate pixel indices against the lookup table size. Crafted images containing indices larger than the palette size cause the decoder to read beyond allocated lookup table memory and expose heap contents in the output image.

Affected

• cpe orthanc-server/orthancversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-5445

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-5445

  An out-of-bounds read vulnerability exists in the function within . The lookup-table decoding logic used for images does not validate pixel indices against the lookup table size. Crafted images containing indices larger t

  nvd.nist.gov

References

• Third Party Advisory · kb.cert.org
• Not Applicable · machinespirits.de
• Product · orthanc-server.com