An out-of-bounds read vulnerability exists in the DicomStreamReader component of Orthanc during DICOM meta-header parsing. The parser may read beyond the bounds of the allocated metadata buffer when encountering malformed metadata structures. Although the flaw does not normally crash the server or directly expose hidden data, it reflects insufficient input validation and could leak unintended memory contents, potentially compromising confidentiality.

Orthanc DICOM Server is affected. No specific version information is available, so all deployed instances of Orthanc may be susceptible until a vendor patch is issued.

The absence of an EPSS score and lack of listing in the CISA KEV catalog suggests limited known exploitation. Nevertheless, the vulnerability can be leveraged by an attacker who can send crafted DICOM files to the server, likely over the network. The attack scenario would entail an adversary injecting malformed meta-headers that trigger the out-of-bounds read, allowing them to glean data from the server's memory. While no crash occurs, the potential for information disclosure raises moderate risk, especially in environments where sensitive imaging data is handled.