CVE-2023-47249

In International Color Consortium DemoIccMAX 79ecb74, a CIccXmlArrayType:::ParseText function (for unsigned short) in IccUtilXml.cpp in libIccXML.a has an out-of-bounds read.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.52% chance of exploitation in the next 30 days, 42th percentile

Published

2023-11-04

Updated

2024-09-05

Proof-of-concept exploits (1)

• InternationalColorConsortium/DemoIccMAX/issues/54

References

• CVE Record
• NVD entry

Related

• CVE-2023-46602
• CVE-2023-46603
• CVE-2023-46866
• CVE-2023-46867
• CVE-2023-48736
• CVE-2023-47248