CISA has published ICS Medical Advisory ICSMA-26-253-02 covering CVE-2026-87020, an integer overflow in Orthanc's pitch and buffer-size computation that leads to a heap out-of-bounds write when the server decodes an attacker-supplied PNG or JPEG image, resulting in a crash of the Orthanc process and a denial-of-service condition.