Threats tagged 'ghsa-v5xr-7mrg-cxwj'

A vulnerability in Eye of GNOME allows an attacker to cause an application crash or potentially expose sensitive memory by opening a specially crafted PNG image with malformed color profile metadata. The flaw arises from improper validation of chunk boundaries during parsing, leading to out-of-bounds reads. Exploitation requires user interaction and is limited to the local user's permissions, resulting in a denial of service or limited memory disclosure.