Little CMS Heap Buffer Overflow Vulnerability in UnrollChunkyBytes Function

A heap buffer overflow vulnerability has been identified in Little CMS version 2.16. The issue arises in the UnrollChunkyBytes function within cmspack.c, where insufficient boundary checking allows the function to read more bytes than allocated, leading to memory corruption.

Impact

Exploitation of this vulnerability causes a heap buffer overflow, which can potentially be exploited to execute arbitrary code or cause a denial-of-service condition by crashing the application.

Reproduction

The vulnerability can be reproduced using a proof-of-concept (POC) file named 'Poc-UnrollChunkyBytes.zip', which is available as an attachment on the GitHub issue discussing this vulnerability. After extracting this ZIP file, it can be compiled and run with the Little CMS library to demonstrate the heap buffer overflow. The AddressSanitizer (ASan) tool can be used to detect the memory corruption caused by the vulnerability.