Lucene search
+L

8 matches found

NVD
NVD
•added 2026/03/10 6:18 p.m.•12 views

CVE-2026-30978

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-use-after-free in CIccCmm::AddXform causing invalid vptr dereference and crash. This vulnerability is fixed in 2.3.1.5...

7.8CVSS0.00363EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/03/10 5:46 p.m.•6 views

CVE-2026-30978

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-use-after-free in CIccCmm::AddXform causing invalid vptr dereference and crash. This vulnerability is fixed in 2.3.1.5...

7.8CVSS5.8AI score0.00363EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
•added 2026/03/10 5:46 p.m.•12 views

EUVD-2026-10716

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-use-after-free in CIccCmm::AddXform causing invalid vptr dereference and crash. This vulnerability is fixed in 2.3.1.5...

7.8CVSS5.8AI score0.00363EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/03/10 5:46 p.m.•11 views

EUVD-2026-10715

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-use-after-free in CIccCmm::AddXform causing invalid vptr dereference and crash. This vulnerability is fixed in 2.3.1.5...

7.8CVSS5.8AI score0.00363EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/03/10 5:46 p.m.•5 views

CVE-2026-30978 Heap-use-after-free in CIccCmm::AddXform()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-use-after-free in CIccCmm::AddXform causing invalid vptr dereference and crash. This vulnerability is fixed in 2.3.1.5...

7.8CVSS5.8AI score0.00363EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/03/10 5:46 p.m.•36 views

CVE-2026-30978 Heap-use-after-free in CIccCmm::AddXform()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-use-after-free in CIccCmm::AddXform causing invalid vptr dereference and crash. This vulnerability is fixed in 2.3.1.5...

7.8CVSS0.00363EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/10 12:00 a.m.•0 views

CVE-2026-30978: Use After Free

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-use-after-free in CIccCmm::AddXform causing invalid vptr dereference and crash. This vulnerability is fixed in 2.3.1.5...

7.8CVSS5.8AI score0.00363EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/10 12:00 a.m.•18 views

iccDEV 安全漏洞

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.5 contained security vulnerabilities. These vulnerabilities stemmed from the use of the CIccCmm::AddXform function, where the heap was reused after...

7.8CVSS5.9AI score0.00363EPSS
SaveExploits0References4
Rows per page
Query Builder