Lucene search
+L

1 matches found

osv_ghsa
osv_ghsa
•added 2026/10/07 8:24 p.m.•46 views

GHSA-GWG2-R3HJ-4W44 ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions

Summary A malformed embedded ICC profile can make ImageSharp allocate memory from attacker-controlled CLUT channel and grid dimensions before verifying that the declared CLUT values are present. In published v1 through v3 packages, the public lazy ICC parser allocates approximately 115 MB from th...

5.3CVSS5.9AI score0.00328EPSS
SaveExploits1References9
Rows per page
Query Builder