Out-of-Bounds Access Vulnerability in International Color Consortium DemoIccMAX
CVE-2023-46866

6.5MEDIUM

Key Information:

Vendor

Color

Status
Demoiccmax
Vendor
CVE Published:
30 October 2023

What is CVE-2023-46866?

In the DemoIccMAX product by the International Color Consortium, a flaw exists in the CIccCLUT::Interp3d method located in IccProfLib/IccTagLut.cpp. This vulnerability arises from an attempt to access array elements using indexes that exceed the valid range, potentially allowing an attacker to exploit this flaw and cause unintended behavior within the application.

References

https://github.com/InternationalColorConsortium/DemoIccMA...
https://github.com/InternationalColorConsortium/DemoIccMA...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.