CVE-2026-5445

Name	CVE-2026-5445
Description	An out-of-bounds read vulnerability exists in the `DecodeLookupTable` function within `DicomImageDecoder.cpp`. The lookup-table decoding logic used for `PALETTE COLOR` images does not validate pixel indices against the lookup table size. Crafted images containing indices larger than the palette size cause the decoder to read beyond allocated lookup table memory and expose heap contents in the output image.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
orthanc (PTS)	bullseye	1.9.2+really1.9.1+dfsg-1+deb11u1	vulnerable
	bullseye (security)	1.9.2+really1.9.1+dfsg-1+deb11u2	vulnerable
	bookworm, bookworm (security)	1.10.1+dfsg-2+deb12u1	vulnerable
	trixie	1.12.7+dfsg-4	vulnerable
	forky, sid	1.12.10+dfsg-2	vulnerable

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
orthanc	source	(unstable)	(unfixed)

https://kb.cert.org/vuls/id/536588