tl;dr: Color Profile Injection is due to untrusted inputs within color profile blobs. Why? Color profiles rely on offset and length fields, enabling crafted profile data to corrupt neighboring structures. Color Profile Injection Background Color Profile Injection (CPI) occurs because user-controllable inputs can corrupt a color profile binary layout. Resulting impact includes memory corruption, logic … Continue reading Color Profile Injection (CPI)