2 matches found
CVE-2026-24412: Improper Input Validation
iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have aHeap Buffer Overflow vulnerability in the CIccTagXmlSegmentedCurve::ToXml function. This occurs when user-controllable input is unsafely incorporate...
8.8CVSS5.8AI score0.00612EPSS
SaveExploits1References1
CVE-2026-24411: Improper Input Validation
iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have Undefined Behavior in CIccTagXmlSegmentedCurve::ToXml. This occurs when user-controllable input is unsafely incorporated into ICC profile data or oth...
8.8CVSS5.7AI score0.00365EPSS
SaveExploits1References1
20