CyberRota Analysis
AI-GeneratedA vulnerability exists in gdk-pixbuf that affects its ability to properly parse specially crafted ICO files, leading to an out-of-bounds read due to insufficient bounds checking against the palette size. This flaw could allow attackers to extract sensitive heap content by manipulating the output image, potentially exposing confidential data. Organizations using gdk-pixbuf for image processing should prioritize addressing this issue to mitigate the risk of data leakage.
Original NVD Description
A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palette indices and rendered as RGB pixel values in the output image, allowing an attacker to extract heap content via the generated output, such as a thumbnail.