> CVE-2026-5441

« BACK_TO_HOME
PUBLISHED
2026-04-09 15:16
MODIFIED
2026-04-09 15:16
EPSS (Prob. Exploit)
0.19%
Top 91.9%
DATA SOURCES:
NVD 🔗 2026-04-09 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

An out-of-bounds read vulnerability exists in the `DecodePsmctRle1` function of `DicomImageDecoder.cpp`. The `PMSCT_RLE1` decompression routine, which decodes the proprietary Philips Compression format, does not properly validate escape markers placed near the end of the compressed data stream. A crafted sequence at the end of the buffer can cause the decoder to read beyond the allocated memory region and leak heap data into the rendered image output.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> HISTORIQUE DES MODIFICATIONS

Première apparition
09/04/2026 15:16
Source: NVD
Total des modifications: 0 Dernière mise à jour: 6 months ago

> REFERENCES

https://kb.cert.org/vuls/id/536588
https://www.machinespirits.de/
https://www.orthanc-server.com/
« BACK_TO_HOME