Out-of-Bounds Read in International Color Consortium DemoIccMAX Product
CVE-2023-46603

7.8HIGH

Key Information:

Vendor

Color

Status
Demoiccmax
Vendor
CVE Published:
23 October 2023

What is CVE-2023-46603?

An out-of-bounds read vulnerability exists in the GetChroma function of the CIccPRMG class within the IccProfLib library, specifically in the DemoIccMAX product from the International Color Consortium. This flaw can potentially lead to information disclosure, impacting the security and integrity of applications using this product. Thorough testing and updates are recommended to mitigate these risks.

References

https://github.com/InternationalColorConsortium/DemoIccMA...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.