1 matches found
GHSA-GWG2-R3HJ-4W44 ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions
Summary A malformed embedded ICC profile can make ImageSharp allocate memory from attacker-controlled CLUT channel and grid dimensions before verifying that the declared CLUT values are present. In published v1 through v3 packages, the public lazy ICC parser allocates approximately 115 MB from th...
5.3CVSS5.7AI score0.00366EPSS
SaveExploits0References6
20