1. 识别用户意图:用户希望我根据提供的网页截图,用简洁的中文Markdown格式总结关于漏洞的关键信息。 2. 提取关键信息: 标题/漏洞名称:SEGv in CiccTagArray::Cleanup() 产品/组件:iccDEV (International Color Consortium Profile) 漏洞概述 (Summary): 这是一个崩溃漏洞(SEGv,Segmentation Fault)。 发生在 函数中。 原因是尝试访问损坏的内存数组/重新分配的指针被跟随,导致无效读取。 触发场景:命名 ICC 配置文件时。 修复方法:在 中添加额外的安全检查,避免解引用无效/损坏的标签指针。 影响范围 (Affected components/files): 文件: (具体函数 ) 版本:2.3.1.5 (根据 "Patch" 部分推断,虽然截图没直接写 "Affected versions" 的具体版本号,但 "Patch" 部分提到了 2.3.1.5,且 "Builds" 部分显示 2.3.1.5 是已发布的版本,通常意味着这是修复版本或受影响版本附近的版本。仔细看 "Patch" 部分,它列出了 作为修复版本。再看 "Affected versions" 列显示 ,这意味着 2.3.1.5 之前的版本受影响)。 修复方案 (Fix/Patch): 合并时间:2024-03-15 修复版本:2.3.1.5 (根据 "Patch" 列显示 ) 具体操作:在 中添加安全检查。 POC/利用代码:页面中没有提供具体的 POC 代码块,只提到了 "Reproducer: icc Prof-Name + 18500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000