A heap-based out-of-bounds read vulnerability exists in libical versions prior to 3.0.17-4.oe2403sp3. The flaw occurs in the function icalvalue_decode_ical_string() when decoding iCalendar input that ends with a backslash, potentially causing application crashes or memory leakage.