Security Advisory

CVE-2026-5442

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-09 14:43:43

Last updated 2026-04-14 16:34:39

Assigner certcc

CVSS score not scored

State PUBLISHED

Description

A heap buffer overflow vulnerability exists in the DICOM image decoder. Dimension fields are encoded using Value Representation (VR) Unsigned Long (UL), instead of the expected VR Unsigned Short (US), which allows extremely large dimensions to be processed. This causes an integer overflow during frame size calculation and results in out-of-bounds memory access during image decoding.

← Browse all CVEs View on cve.org ↗