QT PNG ICC Processing Out-Of-Bounds Read
Posted by deepcore on May 28, 2021 – 7:31 pm
The QImage class can read out-of-bounds when reading a specially-crafted PNG file, where a tag byte offset goes out of bounds. This could potentially allow an attacker to determine values in memory based on the QImage pixels, if QT is used to process untrusted images.
Post a reply
You must be logged in to post a comment.