CVE-2023-46602

The CVE-2023-46602 entry refers to a stack-based buffer overflow in International Color Consortium DemoIccMAX 79ecb74, specifically in icFixXml() within IccXML/IccLibXML/IccUtilXml.cpp of libIccXML.a. Documented impact is high (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Other details include...

International Color Consortium DemoIccMAX 79ecb74 Buffer Error Vulnerability

DemoIccMAX is an International Color Consortium open source demo implementation of an iccMAX color profile. A security vulnerability exists in International Color Consortium DemoIccMAX version 79ecb74, which stems from a stack-based buffer overflow in the icFixXml function in...

PT-2023-30109 · International Color Consortium · International Color Consortium Demoiccmax

Name of the Vulnerable Software and Affected Versions: International Color Consortium DemoIccMAX version 79ecb74 libIccProfLib2 version 2.1.15 Description: There is an out-of-bounds read in the CIccPRMG::GetChroma function in IccProfLib/IccPrmg.cpp in libSampleICC.a. This issue can be triggered b...