Lucene search
+L

3 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/24 12:00 a.m.•2 views

CVE-2026-24412: Improper Input Validation

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have aHeap Buffer Overflow vulnerability in the CIccTagXmlSegmentedCurve::ToXml function. This occurs when user-controllable input is unsafely incorporate...

8.8CVSS5.8AI score0.00612EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/24 12:00 a.m.•2 views

CVE-2026-24411: Improper Input Validation

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have Undefined Behavior in CIccTagXmlSegmentedCurve::ToXml. This occurs when user-controllable input is unsafely incorporated into ICC profile data or oth...

8.8CVSS5.7AI score0.00365EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/01/24 12:00 a.m.•35 views

PT-2026-4561

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have aHeap Buffer Overflow vulnerability in the CIccTagXmlSegmentedCurve::ToXml function. This occurs when user-controllable input is unsafely incorporate...

8.8CVSS5.6AI score0.00612EPSS
SaveExploits1References4
Rows per page
Query Builder