DICOM, Pydicom, GDCM, and Orthanc: A technical tour of what really happens in the heap

· Blog Talosintelligence · May 28, 2026, 10:20 a.m.
Summary
This blog post presents a technical case study showcasing the creation of a heap overflow vulnerability by exploiting the DICOM file format. It delves into the intricacies of related software libraries and tools, including Pydicom, GDCM, and Orthanc, offering valuable insights for developers interested in security vulnerabilities.