CVE-2023-48736: Medium severity international color consortium demoiccmax vulnerability
Published Nov 18, 2023
·Updated
In International Color Consortium DemoIccMAX 3e7948b, CIccCLUT::Interp2d in IccTagLut.cpp in libSampleICC.a has an out-of-bounds read.
Affected Software
1 affected component
Color DemoIccMAX=2023-11-09
Event History
Nov 18, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID is CVE-2023-48736.
2
What is the severity of CVE-2023-48736?
The severity of CVE-2023-48736 is medium with a severity value of 6.5.
3
What is the affected software?
The affected software is Color Demoiccmax version 2023-11-09.
4
How can I fix CVE-2023-48736?
To fix CVE-2023-48736, update to a version of Color Demoiccmax that is later than 2023-11-09.
5
Is there any additional information about CVE-2023-48736?
Yes, you can find more information about CVE-2023-48736 at the following reference link: [GitHub PR](https://github.com/InternationalColorConsortium/DemoIccMAX/pull/58).