CVE-2026-25503
iccDEV Has Type Confusion in CIccTagEmbeddedHeightImage::Validate()
Résumé
iccDEV Has Type Confusion in CIccTagEmbeddedHeightImage::Validate()
Description d'origine
La description telle que publiée par la source (souvent en anglais).
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, type confusion allowed malformed ICC profiles to trigger undefined behavior when loading invalid icImageEncodingType values causing denial of service. This issue has been patched in version 2.3.1.2.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- report github.com