Heap-buffer-overflow in _cmsWriteXYZNumber in lcms
Summary
OSV-2022-639: Heap-buffer-overflow in _cmsWriteXYZNumber. Affects lcms versions >= 1394d740d96886b501e0ad04fe926a72eca3f01c, < 77758b7f815f4ced91e088ce855b31c90ad0a406. Fixed in 77758b7f815f4ced91e088ce855b31c90ad0a406. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
lcms is an open-source package that provides a library for managing color profiles. It is commonly used in image processing and color management applications. The package offers various functionalities for color space conversions, profile manipulation, and color correction. However, a vulnerability has been discovered in the _cmsWriteXYZNumber function of lcms, which can lead to a heap-buffer-overflow read of 8 bytes.
Vulnerability Detail
The vulnerability in lcms arises from a heap-buffer-overflow read of 8 bytes in the _cmsWriteXYZNumber function. This issue can be triggered when processing certain viewing conditions data. An attacker could potentially exploit this vulnerability to execute arbitrary code or cause a denial-of-service condition. The vulnerability has a medium severity rating.
How To Fix
Minimum fixed version
77758b7f815f4ced91e088ce855b31c90ad0a406
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is currently no known workaround for this vulnerability. It is advised to apply the fix by updating the lcms package to a patched version.
Conclusion
In conclusion, the lcms package is vulnerable to a heap-buffer-overflow read of 8 bytes in the _cmsWriteXYZNumber function. This vulnerability can be mitigated by updating the package to a version that includes the fix. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for lcms →
FAQ
lcms is an open-source package that provides a library for managing color profiles in image processing and color management applications.
This vulnerability can potentially allow an attacker to execute arbitrary code or cause a denial-of-service condition.
To fix this vulnerability, update the lcms package to a version that includes the fix.
No, there is currently no known workaround for this vulnerability.
You can find more information about this vulnerability in the OSS-Fuzz report: [link to report].
References
Related vulnerabilities
Recent vulnerabilities recorded for lcms.
