CVE-2026-87020— Orthanc DICOM Server Integer Overflow or Wraparound
Quick assessment
Affected
Orthanc DICOM Server
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Orthanc DICOM 服务器解码攻击者提供的 PNG 图像时，由于在指定的 pitch（行步长）和缓冲区大小计算中发生整数溢出，会导致堆栈越界写入漏洞。
Possible ATT&CK Techniques 1 AI
T1205.004Affected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Orthanc | DICOM Server | < 1.13.0 |
affected |
1.13.0 |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-87020
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Orthanc DICOM Server Integer Overflow or Wraparound
Source: CVE Program / CVE List V5
Vulnerability Description
An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
整数溢出或超界折返
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Orthanc | DICOM Server | 0 ~ 1.13.0 | - |
|
II. Public POCs for CVE-2026-87020
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-87020
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-87020 (2)
Vendor Pages for CVE-2026-87020 (1)
IV. Related Vulnerabilities
Same product: DICOM Server
-
CVE-2026-10528
Orthanc DICOM Server DCMTK FromDcmtkBridge.cpp read stack-ba -
CVE-2026-5439
Memory Exhaustion via Forged ZIP Metadata -
CVE-2026-5437
Out-of-Bounds Read in DicomStreamReader -
CVE-2026-5438
Gzip Decompression Bomb via Content-Encoding Header -
CVE-2026-5440
Memory Exhaustion via Unbounded Content-Length
Same vendor: Orthanc
-
CVE-2026-10528
Orthanc DICOM Server DCMTK FromDcmtkBridge.cpp read stack-ba -
CVE-2026-10173
Orthanc Explorer 2 URL StudyList.vue cross site scripting -
CVE-2026-5439
Memory Exhaustion via Forged ZIP Metadata -
CVE-2026-5437
Out-of-Bounds Read in DicomStreamReader -
CVE-2026-5438
Gzip Decompression Bomb via Content-Encoding Header
Same weakness: CWE-190
-
CVE-2026-89146
libp2p-rendezvous through 0.17.1 Denial of Service via Unbou -
CVE-2026-89158
PCRE2 10.48前32位整数溢出越界写 -
CVE-2026-89157
PCRE2 10.48 32位平台越界写漏洞 -
CVE-2026-88914
Gstreamer1-plugins-good: gstreamer: integer overflow and out -
CVE-2026-16174
Netskope Endpoint DLP Driver Integer Overflow Leading to Ker
V. Comments for CVE-2026-87020
No comments yet