Out-of-Bounds Read Vulnerability in Philips DICOM Image Decoder

CVE-2026-5441

What is CVE-2026-5441?

A vulnerability exists in the DecodePsmctRle1 function of the DICOM Image Decoder within Philips products. This flaw arises due to improper validation of escape markers in the PMSCT_RLE1 decompression routine. When specially crafted data is processed near the end of the compressed data stream, it can lead to out-of-bounds reads, allowing attackers to access sensitive memory contents that should remain confidential. This vulnerability can potentially expose heap data through the rendered image output, posing risks to data integrity and security.

References