Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
iccDEV: UB at IccUtil.cpp
Vulnerability Description
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is an Undefined Behavior (UB) condition in IccUtil.cpp triggered by a crafted input profile. Under UndefinedBehaviorSanitizer, the issue is reported as invalid left shift operations on icUInt32Number (unsigned 32-bit) where the shifted value “cannot be represented” in that type. This issue has been patched in version 2.3.1.6.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
依赖未定义、未指明或实现定义的行为
Vulnerability Title
iccDEV 安全漏洞
Vulnerability Description
iccDEV是International Color Consortium开源的一个颜色配置代码库。 iccDEV 2.3.1.6之前版本存在安全漏洞，该漏洞源于特制输入配置文件可能触发无效的左移操作，导致未定义行为。
CVSS Information
N/A
Vulnerability Type
N/A