Security research highlights a heap overflow vulnerability within DICOM parsing, specifically targeting Orthanc servers during image uploads. By exploiting the complex DICOM file format, attackers can trigger an out-of-bounds write, posing a significant risk to hospital PACS systems that automatically ingest and decode these files.
Orthanc
1 post
DICOM, Pydicom, GDCM, and Orthanc: A technical tour of what really happens in the heap