iccDEV is Vulnerable to Denial of Service via Infinite Loop in CalcProfileID()
Résumé
iccDEV is Vulnerable to Denial of Service via Infinite Loop in CalcProfileID()
Description d'origine
La description telle que publiée par la source (souvent en anglais).
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have an infinite loop in the IccProfile.cpp function, CalcProfileID. This issue is fixed in version 2.3.1.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- report github.com