iccDEV Type Confusion Vulnerability in CIccSegmentedCurveXml::ToXml()

A type confusion vulnerability has been identified in the iccDEV library, specifically in versions prior to 2.3.1.2. The issue arises in the 'CIccSegmentedCurveXml::ToXml()' function, located in 'IccXML/IccLibXML/IccMpeXml.cpp'. This vulnerability impacts users who process ICC color profiles using the iccDEV library.

Impact

Exploitation of this vulnerability leads to undefined behavior, with the potential for memory corruption.

Reproduction

The vulnerability can be reproduced by using the 'iccFromXml' command to load an ICC profile, followed by the 'iccToXml' command to convert it back to XML. This process triggers a runtime error due to the improper handling of object types, which is indicative of a type confusion vulnerability.

Remediation

Users can upgrade to version 2.3.1.2, which includes a patch for this vulnerability.