CVE-2023-46602

Name of the Vulnerable Software and Affected Versions libIccXML.a version 79ecb74 libIccProfLib2 version 2.1.15

Description There is a stack-based buffer overflow in the icFixXml function in IccXML/IccLibXML/IccUtilXml.cpp. This issue can be exploited by processing a maliciously crafted ICC Color Profile or TIFF image, leading to arbitrary code execution.

Recommendations For libIccXML.a version 79ecb74, consider disabling the icFixXml function until a patch is available. For libIccProfLib2 version 2.1.15, consider disabling the icFixXml function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.