A heap-based out-of-bounds read vulnerability exists in libical versions prior to 3.0.11-4.oe2203sp4 in the function icalvalue_decode_ical_string(). This occurs when decoding iCalendar input that ends with a backslash, potentially causing application crashes or memory leakage.