CVE-2026-87020— Orthanc DICOM Server Integer Overflow or Wraparound
Quick assessment
Affected
Orthanc DICOM Server
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Orthanc dicom server是美国Orthanc组织的医学影像存储与传输系统。 Orthanc dicom server 1.13.0之前版本存在数字错误漏洞，该漏洞源于处理特制PNG时指定间距和缓冲区大小计算存在整数溢出，导致堆越界写入，可能造成完整性及可用性影响。
Possible ATT&CK Techniques 1 AI
T1205.004Affected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Orthanc | DICOM Server | < 1.13.0 |
affected |
1.13.0 |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-87020
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Orthanc DICOM Server Integer Overflow or Wraparound
Source: CVE Program / CVE List V5
Vulnerability Description
An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
整数溢出或超界折返
Source: CVE Program / CVE List V5
Vulnerability Title
Orthanc dicom server 数字错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Orthanc dicom server是美国Orthanc组织的医学影像存储与传输系统。 Orthanc dicom server 1.13.0之前版本存在数字错误漏洞，该漏洞源于处理特制PNG时指定间距和缓冲区大小计算存在整数溢出，导致堆越界写入，可能造成完整性及可用性影响。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Orthanc | DICOM Server | 0 ~ 1.13.0 | - |
|
II. Public POCs for CVE-2026-87020
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-87020
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-87020 (2)
Vendor Pages for CVE-2026-87020 (1)
IV. Related Vulnerabilities
Same product: DICOM Server
-
CVE-2026-10528
Orthanc DICOM Server DCMTK FromDcmtkBridge.cpp read stack-ba -
CVE-2026-5439
Memory Exhaustion via Forged ZIP Metadata -
CVE-2026-5437
Out-of-Bounds Read in DicomStreamReader -
CVE-2026-5438
Gzip Decompression Bomb via Content-Encoding Header -
CVE-2026-5440
Memory Exhaustion via Unbounded Content-Length
Same vendor: Orthanc
-
CVE-2026-10528
Orthanc DICOM Server DCMTK FromDcmtkBridge.cpp read stack-ba -
CVE-2026-10173
Orthanc Explorer 2 URL StudyList.vue cross site scripting -
CVE-2026-5439
Memory Exhaustion via Forged ZIP Metadata -
CVE-2026-5437
Out-of-Bounds Read in DicomStreamReader -
CVE-2026-5438
Gzip Decompression Bomb via Content-Encoding Header
Same weakness: CWE-190
-
CVE-2026-62438
Gimp: gimp: paa integer overflow out-of-bounds read -
CVE-2026-62439
Gimp: gimp: file-pvr plug-in pvr file parsing integer overfl -
CVE-2026-102834
JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infi -
CVE-2026-102692
RIOT: Potential integer overflow in nanocoap Block2 handling -
CVE-2026-57488
pupnp: Integer truncation in HTTP Content-Length parsing ena
V. Comments for CVE-2026-87020
No comments yet