CVE-2026-87020
An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG.
- Published Sep 11, 2026
- CVSS 7.2 high
- 0.6% chance of exploitation in the next 30 days (EPSS)