iccDEV CiccTagArray::Cleanup() Memory Corruption Fix

1. 识别用户意图：用户希望我根据提供的网页截图，用简洁的中文Markdown格式总结关于漏洞的关键信息。 2. 提取关键信息： 标题/漏洞名称：SEGv in CiccTagArray::Cleanup() 产品/组件：iccDEV (International Color Consortium Profile) 漏洞概述 (Summary)： 这是一个崩溃漏洞（SEGv，Segmentation Fault）。 发生在 函数中。 原因是尝试访问损坏的内存数组/重新分配的指针被跟随，导致无效读取。 触发场景：命名 ICC 配置文件时。 修复方法：在 中添加额外的安全检查，避免解引用无效/损坏的标签指针。 影响范围 (Affected components/files)： 文件： (具体函数 ) 版本：2.3.1.5 (根据 "Patch" 部分推断，虽然截图没直接写 "Affected versions" 的具体版本号，但 "Patch" 部分提到了 2.3.1.5，且 "Builds" 部分显示 2.3.1.5 是已发布的版本，通常意味着这是修复版本或受影响版本附近的版本。仔细看 "Patch" 部分，它列出了 作为修复版本。再看 "Affected versions" 列显示 ，这意味着 2.3.1.5 之前的版本受影响)。 修复方案 (Fix/Patch)： 合并时间：2024-03-15 修复版本：2.3.1.5 (根据 "Patch" 列显示 ) 具体操作：在 中添加安全检查。 POC/利用代码：页面中没有提供具体的 POC 代码块，只提到了 "Reproducer: icc Prof-Name + 18500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000

Goal Reached Thanks to every supporter — we hit 100%!

iccDEV CiccTagArray::Cleanup() Memory Corruption Fix

More from this source