Lucene search
+L

1 matches found

OSV
OSV
•added 2026/10/07 8:24 p.m.•8 views

GHSA-GWG2-R3HJ-4W44 ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions

Summary A malformed embedded ICC profile can make ImageSharp allocate memory from attacker-controlled CLUT channel and grid dimensions before verifying that the declared CLUT values are present. In published v1 through v3 packages, the public lazy ICC parser allocates approximately 115 MB from th...

5.3CVSS5.7AI score0.00366EPSS
SaveExploits0References6
Rows per page
Query Builder