Color

Iccdev

59 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2026-21486

  • EPSS 0.02%
  • Veröffentlicht 06.01.2026 03:36:45
  • Zuletzt bearbeitet 12.01.2026 20:59:22

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below contain Use After Free, Heap-based Buffer Overflow and Integer Overflow or Wraparound and Out-of-bounds Write vulnerabilities in i...

7.1

CVE-2026-21487

Exploit
  • EPSS 0.02%
  • Veröffentlicht 06.01.2026 03:27:45
  • Zuletzt bearbeitet 12.01.2026 20:57:20

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below have an Out-of-bounds Read, Use of Out-of-range Pointer Offset and have Improper Input Validation in its CIccProfile::LoadTag func...

8.8

CVE-2026-21485

Exploit
  • EPSS 0.1%
  • Veröffentlicht 06.01.2026 03:17:47
  • Zuletzt bearbeitet 14.01.2026 18:45:37

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are prone to have Undefined Behavior (UB) and Out of Memory errors. This issue is fixed in version 2.3.1.2.

8.8

CVE-2026-21677

Exploit
  • EPSS 0.1%
  • Veröffentlicht 06.01.2026 03:11:30
  • Zuletzt bearbeitet 12.01.2026 20:40:01

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have Undefined Behavior in its CIccCLUT::Init function which initializes and sets the size of a CLUT. This issue is fixed in version...

8.8

CVE-2026-21676

Exploit
  • EPSS 0.04%
  • Veröffentlicht 06.01.2026 03:07:36
  • Zuletzt bearbeitet 12.01.2026 20:55:47

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have a Heap-based Buffer Overflow in its CIccMBB::Validate function which checks tag data validity. This issue is fixed in version 2...

9.8

CVE-2026-21675

Exploit
  • EPSS 0.12%
  • Veröffentlicht 06.01.2026 02:15:45
  • Zuletzt bearbeitet 12.01.2026 21:00:31

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a Use After Free vulnerability in the CIccXform::Create() function, where it deletes the hint. This issue is fixed in versio...

5.5

CVE-2026-21674

Exploit
  • EPSS 0.01%
  • Veröffentlicht 06.01.2026 02:15:45
  • Zuletzt bearbeitet 12.01.2026 21:02:37

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a memory leak vulnerability in its XML MPE Parsing Path (iccFromXml). This issue is fixed in version 2.3.1.1.

7.8

CVE-2026-21673

Exploit
  • EPSS 0.01%
  • Veröffentlicht 06.01.2026 02:15:45
  • Zuletzt bearbeitet 12.01.2026 21:03:33

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have overflows and underflows in CIccXmlArrayType::ParseTextCountNum(). This vulnerability affects users of the iccDEV library who ...

7.5

CVE-2026-21507

Exploit
  • EPSS 0.05%
  • Veröffentlicht 06.01.2026 00:11:25
  • Zuletzt bearbeitet 12.01.2026 21:04:26

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have an infinite loop in the IccProfile.cpp function, CalcProfileID. This issue is fixed in version 2.3.1.1.