CVE-2026-5437

CVE-2026-5437 is an out-of-bounds read vulnerability in the DicomStreamReader component that occurs during DICOM meta-header parsing when processing malformed metadata structures. The flaw stems from insufficient input validation, allowing the parser to read beyond allocated buffer boundaries, though it does not typically result in server crashes or direct data exposure to attackers. The vulnerability carries a HIGH severity rating with a CVSS score of 7.5, reflecting a network-accessible attack vector with low complexity and no authentication requirements. The impact is classified as availability-focused, indicating potential denial of service conditions, while confidentiality and integrity impacts are assessed as none. This vulnerability is not currently listed on the Known Exploited Vulnerabilities catalog and shows no evidence of active exploitation. The EPSS score of 0.0005 indicates this vulnerability is exploited less frequently than the vast majority of known CVEs, and community attention appears minimal with inactive status on vulnerability tracking lists.