Color

Iccdev

84 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2026-30980

  • EPSS 0.01%
  • Veröffentlicht 10.03.2026 18:07:26
  • Zuletzt bearbeitet 13.03.2026 20:28:15

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack overflow in CIccBasicStructFactory::CreateStruct() causing uncontrolled recursion/stack exhaustion and crash. This vulnera...

6.1

CVE-2026-31797

  • EPSS 0.01%
  • Veröffentlicht 10.03.2026 18:06:12
  • Zuletzt bearbeitet 13.03.2026 19:30:09

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CTiffImg::ReadLine() when iccApplyProfiles processes a crafted TIFF image, causing memory disclosure ...

7.8

CVE-2026-31796

  • EPSS 0.01%
  • Veröffentlicht 10.03.2026 18:05:09
  • Zuletzt bearbeitet 13.03.2026 20:34:05

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow in icCurvesFromXml() causing heap memory corruption or crash. This vulnerability is fixed in 2.3.1.5.

7.8

CVE-2026-31795

  • EPSS 0.01%
  • Veröffentlicht 10.03.2026 18:04:08
  • Zuletzt bearbeitet 13.03.2026 20:33:55

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow write in CIccXform3DLut::Apply() corrupting stack memory or crash. This vulnerability is fixed in 2.3.1.5.

5.5

CVE-2026-31794

  • EPSS 0.02%
  • Veröffentlicht 10.03.2026 18:02:54
  • Zuletzt bearbeitet 13.03.2026 20:30:38

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a segmentation fault from invalid/wild pointer read in CIccCLUT::Interp3d() causing a denial of service. This vulnerability is fix...

5.5

CVE-2026-31793

  • EPSS 0.02%
  • Veröffentlicht 10.03.2026 18:01:48
  • Zuletzt bearbeitet 13.03.2026 20:30:30

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a segmentation fault due to invalid/wild pointer read in CIccCalculatorFunc::ApplySequence() causing denial of service. This vulne...

7.8

CVE-2026-31792

  • EPSS 0.02%
  • Veröffentlicht 10.03.2026 18:00:29
  • Zuletzt bearbeitet 13.03.2026 20:30:07

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a null pointer dereference in CIccTagXmlStruct::ParseTag() causing a segmentation fault or denial of service. This vulnerability i...

7.8

CVE-2026-30987

  • EPSS 0.01%
  • Veröffentlicht 10.03.2026 17:59:17
  • Zuletzt bearbeitet 13.03.2026 20:29:44

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in CIccTagNum<>::GetValues() causing stack memory corruption or crash. This vulnerability is fixed in 2.3....

5.5

CVE-2026-30986

  • EPSS 0.01%
  • Veröffentlicht 10.03.2026 17:56:44
  • Zuletzt bearbeitet 13.03.2026 20:29:34

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow write in CIccMatrixMath::SetRange() causing memory corruption or crash. This vulnerability is fixed i...

7.8

CVE-2026-30985

  • EPSS 0.01%
  • Veröffentlicht 10.03.2026 17:55:21
  • Zuletzt bearbeitet 13.03.2026 20:29:11

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow write in CIccMatrixMath::SetRange() causing memory corruption or crash. This vulnerability is fixed i...