ImageSharp: ICC LUT16 output channel count can write beyond Vector4

Summary When ICC conversion is enabled, a malformed embedded ICC LUT16 profile with more than four output channels can corrupt memory during ImageSharp color conversion. The ICC parser accepts up to 15 CLUT output channels, while the conversion implementation stores intermediate values in Vector4...

PT-2026-106829

Name of the Vulnerable Software and Affected Versions ImageSharp versions 4.0.0 through 4.1.1 Description An issue exists in the ICC LUT16 conversion process where the system accepts more than four output channels, despite ClutCalculator.Calculate and LutEntryCalculator.CalculateLut storing value...