A heap-based out-of-bounds read vulnerability exists in libical through version 3.0.17-4.oe2403sp1 in the function icalvalue_decode_ical_string() when decoding input that ends with a backslash. This flaw can cause application crashes or memory leakage by reading past the intended buffer boundary.