Orthanc DICOM Server

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-253-02.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability could allow an authenticated remote attacker to write past the end of a heap allocation when Orthanc decodes an attacker-supplied PNG or JPEG image, resulting in a crash of the Orthanc process and a denial-of-service condition.</strong></p> <p>The following versions of Orthanc DICOM Server are affected:</p> <ul> <li>Orthanc DICOM Server <1.13.0. (CVE-2026-87020)</li> </ul> <div class…