Lucene search
K

4 matches found

OSV
OSV
added 2026/01/06 3:7 a.m.3 views

CVE-2026-21676 iccDEV has a Heap-based Buffer Overflow in its CIccMBB::Validate() function

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have a Heap-based Buffer Overflow in its CIccMBB::Validate function which checks tag data validity. This issue is fixed in version 2.3.1.1...

8.8CVSS6.5AI score0.00059EPSS
Exploits1References5
CVE
CVE
added 2026/01/06 3:7 a.m.7 views

CVE-2026-21676

ICCDev iccDEV contains a Heap-based Buffer Overflow in CIccMBB::Validate that affects versions 2.3.1 and earlier. The issue is fixed in version 2.3.1.1. This CVE-2026-21676 entry is supported by Red Hat and NVD descriptions, identifying the vulnerable component and the fixed version. Remediation:...

8.8CVSS6.5AI score0.00059EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/06 3:7 a.m.3 views

CVE-2026-21676 iccDEV has a Heap-based Buffer Overflow in its CIccMBB::Validate() function

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have a Heap-based Buffer Overflow in its CIccMBB::Validate function which checks tag data validity. This issue is fixed in version 2.3.1.1...

8.8CVSS6.5AI score0.00059EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.3 views

iccDEV 安全漏洞

iccDEV is a color configuration codebase open-sourced by the International Color Consortium ICC. A security vulnerability exists in iccDEV 2.3.1 and earlier versions, which stems from a heap buffer overflow in the CIccMBB::Validate function, which could lead to a heap buffer overflow attack...

8.8CVSS6.9AI score0.00059EPSS
Exploits1References3
Rows per page
Query Builder