Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
iccDEV Has Type Confusion in CIccTagEmbeddedHeightImage::Validate()
Vulnerability Description
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, type confusion allowed malformed ICC profiles to trigger undefined behavior when loading invalid icImageEncodingType values causing denial of service. This issue has been patched in version 2.3.1.2.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Vulnerability Type
不正确的类型转换
Vulnerability Title
iccDEV 安全漏洞
Vulnerability Description
iccDEV是International Color Consortium开源的一个颜色配置代码库。 iccDEV 2.3.1.2之前版本存在安全漏洞，该漏洞源于类型混淆导致加载无效icImageEncodingType值时触发未定义行为，可能导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A