A heap buffer overflow vulnerability exists during the decoding of `PALETTE COLOR` DICOM images. Pixel length validation uses 32-bit multiplication for width and height calculations. If these values overflow, the validation check incorrectly succeeds, allowing the decoder to read and write to memory beyond allocated buffers.
| Vendor | Product | Versions |
|---|---|---|
| Orthanc | DICOM Server | 0, 1.12.10 |
Updated severity to CRITICAL, added affected version 1.12.10, and corrected exploit availability status.
Initial creation
