CVE-2023-48736

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Nov 18, 2023
Updated: Nov 24, 2023
CWE ID 125

Summary

CVE-2023-48736 is a vulnerability affecting International Color Consortium DemoIccMAX 3e7948b. It involves an out-of-bounds read issue in the CIccCLUT::Interp2d function located in IccTagLut.cpp, which is part of the libSampleICC.a library. This flaw could potentially allow an attacker to read memory outside of the intended boundaries, leading to potential security risks. The impact of this vulnerability is currently unknown, but users are advised to update to a patched version as soon as available.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share