Because of a missing null check when parsing an XMP profile a use after free will happen that might result in a crash.
{
"cwe_ids": [
"CWE-252",
"CWE-400",
"CWE-416",
"CWE-476",
"CWE-703"
],
"github_reviewed": true,
"github_reviewed_at": "2026-07-24T14:15:23Z",
"nvd_published_at": null,
"severity": "LOW"
}