Lucene search
+L

177 matches found

Positive Technologies
Positive Technologies
added 2026/01/07 12:00 a.m.19 views

PT-2026-2063

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools used for interacting with, manipulating, and applying ICC color management profiles. Versions prior to 2.3.1.2 are susceptible to a NULL pointer dereference...

5.5CVSS6.5AI score0.00164EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2026/01/07 12:00 a.m.11 views

PT-2026-2087

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools for interacting with International Color Consortium ICC color management profiles. A Type Confusion issue exists in the CIccTagXmlTagData::ToXml function,...

6.3CVSS6.5AI score0.00202EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/01/07 12:00 a.m.10 views

iccDEV 缓冲区错误漏洞

iccDEV is a color configuration codebase open-sourced by the International Color Consortium ICC. A buffer error vulnerability exists in versions prior to iccDEV 2.3.1.2, which stems from a heap buffer overflow in the ToneMap parser...

7.8CVSS7.1AI score0.00191EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/07 12:00 a.m.23 views

PT-2026-2066

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools used for interacting with, manipulating, and applying ICC color management profiles. A stack overflow issue exists in the XML calculator macro expansion...

7.8CVSS6.8AI score0.00192EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2026/01/07 12:00 a.m.9 views

iccDEV 数字错误漏洞

iccDEV is an open source color configuration code library from the International Color Consortium ICC. A numeric error vulnerability exists in versions prior to iccDEV 2.3.1.2, which stems from a divide-by-zero error in the TIFF Image Reader...

5.5CVSS6.9AI score0.00112EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/07 12:00 a.m.19 views

PT-2026-2083

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools for interacting with International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 contain Undefined Behavior in the...

7.1CVSS6.6AI score0.00253EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/01/07 12:00 a.m.15 views

iccDEV 输入验证错误漏洞

iccDEV is an open source color configuration code base from the International Color Consortium. An input validation error vulnerability exists in versions of iccDEV prior to 2.3.1.2 that stems from the presence of an undefined behavior runtime error...

7.1CVSS6.9AI score0.00183EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/07 12:00 a.m.9 views

iccDEV 安全漏洞

iccDEV is an open source color configuration code base from the International Color Consortium ICC. A security vulnerability exists in versions prior to iccDEV 2.3.1.2, which stems from a stack overflow in the XML Calculator macro extension...

7.8CVSS7.2AI score0.00192EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/01/07 12:00 a.m.12 views

PT-2026-2071

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools used for interacting with, manipulating, and applying ICC color management profiles. Versions prior to 2.3.1.2 exhibit undefined behavior due to an invalid enu...

7.8CVSS6.6AI score0.00173EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2026/01/07 12:00 a.m.11 views

PT-2026-2072

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools used for interacting with, manipulating, and applying ICC color management profiles. A null pointer dereference issue exists in the CIccProfileXml::ParseBasic...

5.5CVSS6.5AI score0.00164EPSS
SaveExploits1References8
CVE
CVE
added 2026/01/06 8:23 p.m.22 views

CVE-2026-21492

CVE-2026-21492 affects the iccDEV library used for ICC color profile handling. Versions prior to 2.3.1.2 contain a NULL pointer member call vulnerability in the ToneMap Writer. The issue can trigger dereferencing of a null pointer when processing profiles. Version 2.3.1.2 includes a patch. No pub...

5.5CVSS6.4AI score0.00171EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
added 2026/01/06 8:23 p.m.11 views

EUVD-2026-1143

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a NULL pointer member call vulnerability. This vulnerability affects users of the iccDEV libra...

5.5CVSS6.3AI score0.00171EPSS
SaveExploits1References5
OSV
OSV
added 2026/01/06 8:23 p.m.10 views

CVE-2026-21492 iccDEV ToneMap Writer has NULL Pointer Member Call

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a NULL pointer member call vulnerability. This vulnerability affects users of the iccDEV libra...

5.5CVSS6.7AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2026/01/06 7:07 p.m.8 views

CVE-2026-21491 iccDEV has unicode buffer overflow in CIccTagTextDescription

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. A vulnerability present in versions prior to 2.3.1.2 affects users of the iccDEV library who process ICC color profiles. It...

6.1CVSS6.9AI score0.00193EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/01/06 7:07 p.m.46 views

CVE-2026-21491 iccDEV has unicode buffer overflow in CIccTagTextDescription

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. A vulnerability present in versions prior to 2.3.1.2 affects users of the iccDEV library who process ICC color profiles. It...

6.1CVSS0.00193EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/01/06 7:04 p.m.8 views

CVE-2026-21490 iccDEV has heap buffer overflow in CIccTagLut16::Validate()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. A vulnerability present in versions prior to 2.3.1.2 affects users of the iccDEV library who process ICC color profiles. It...

6.1CVSS6.9AI score0.00192EPSS
SaveExploits1References4
OSV
OSV
added 2026/01/06 7:04 p.m.13 views

CVE-2026-21490 iccDEV has heap buffer overflow in CIccTagLut16::Validate()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. A vulnerability present in versions prior to 2.3.1.2 affects users of the iccDEV library who process ICC color profiles. It...

6.1CVSS7AI score
SaveExploits0References6
EUVD
EUVD
added 2026/01/06 7:00 p.m.8 views

EUVD-2026-1146

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. A vulnerability present in versions prior to 2.3.1.2 affects users of the iccDEV library who process ICC color profiles. It...

6.1CVSS6.7AI score0.00142EPSS
SaveExploits0References4
CVE
CVE
added 2026/01/06 7:00 p.m.57 views

CVE-2026-21494

The vulnerability CVE-2026-21494 affects iccDEV prior to 2.3.1.2, where a heap buffer overflow occurs in CIccTagLut8::Validate() when processing ICC color profiles. A patch exists in version 2.3.1.2. No public workarounds are documented in the provided sources. Remediation is to upgrade to 2.3.1....

7.1CVSS6.9AI score0.00142EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/01/06 7:00 p.m.46 views

CVE-2026-21494 iccDEV has heap buffer overflow in CIccTagLut8::Validate()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. A vulnerability present in versions prior to 2.3.1.2 affects users of the iccDEV library who process ICC color profiles. It...

6.1CVSS0.00142EPSS
SaveExploits0References4
Rows per page
Query Builder