Executive brief
Orthanc DICOM Server is a medical imaging platform used to store, view, and retrieve patient imaging data. An integer overflow vulnerability in PNG image decoding allows an attacker to upload a malicious PNG file that causes a heap buffer overflow, potentially leading to server crash or unauthorized access to sensitive medical records.
Technical details
The vulnerability is an integer overflow in pitch and buffer-size computation during PNG decoding that leads to a heap out-of-bounds write. When Orthanc processes an attacker-supplied malicious PNG image embedded in DICOM data, insufficient validation of buffer calculations allows the overflow to occur. The attack requires network access to the Orthanc server and the ability to upload or provide a crafted PNG file. A successful exploit can result in denial of service through a server crash or potentially arbitrary code execution with the privileges of the Orthanc process.
Affected products
- Orthanc Project Orthanc DICOM Server
Timeline
- 2026-09-11: disclosed