CVE-2026-25503
iccDEV Has Type Confusion in CIccTagEmbeddedHeightImage::Validate()
概要
iccDEV Has Type Confusion in CIccTagEmbeddedHeightImage::Validate()
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, type confusion allowed malformed ICC profiles to trigger undefined behavior when loading invalid icImageEncodingType values causing denial of service. This issue has been patched in version 2.3.1.2.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- report github.com