Lucene search
K

20 matches found

RedhatCVE
RedhatCVE
added 2026/04/01 11:0 p.m.2 views

CVE-2026-34555

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a stack-buffer-overflow SBO in CIccTagFixedNum::GetValues and a related bug chain. The primary crash is an AddressSanitizer-reported WRITE of size 4 that overflows a...

6.2CVSS5.8AI score0.00033EPSS
Exploits1References1
NVD
NVD
added 2026/03/31 11:17 p.m.1 views

CVE-2026-34555

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a stack-buffer-overflow SBO in CIccTagFixedNum::GetValues and a related bug chain. The primary crash is an AddressSanitizer-reported WRITE of size 4 that overflows a...

6.2CVSS0.00033EPSS
Exploits1References6
OSV
OSV
added 2026/03/31 10:21 p.m.1 views

CVE-2026-34555 iccDEV: SBO in CIccTagFixedNum::GetValues()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a stack-buffer-overflow SBO in CIccTagFixedNum::GetValues and a related bug chain. The primary crash is an AddressSanitizer-reported WRITE of size 4 that overflows a...

6.2CVSS5.8AI score0.00033EPSS
Exploits1References8
Vulnrichment
Vulnrichment
added 2026/03/31 10:21 p.m.2 views

CVE-2026-34555 iccDEV: SBO in CIccTagFixedNum::GetValues()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a stack-buffer-overflow SBO in CIccTagFixedNum::GetValues and a related bug chain. The primary crash is an AddressSanitizer-reported WRITE of size 4 that overflows a...

6.2CVSS5.8AI score0.00033EPSS
Exploits1References6
Cvelist
Cvelist
added 2026/03/31 10:21 p.m.20 views

CVE-2026-34555 iccDEV: SBO in CIccTagFixedNum::GetValues()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a stack-buffer-overflow SBO in CIccTagFixedNum::GetValues and a related bug chain. The primary crash is an AddressSanitizer-reported WRITE of size 4 that overflows a...

6.2CVSS0.00033EPSS
Exploits1References6
EUVD
EUVD
added 2026/03/31 10:21 p.m.2 views

EUVD-2026-17721

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a stack-buffer-overflow SBO in CIccTagFixedNum::GetValues and a related bug chain. The primary crash is an AddressSanitizer-reported WRITE of size 4 that overflows a...

6.2CVSS5.8AI score0.00033EPSS
Exploits1References6
CNNVD
CNNVD
added 2026/03/31 12:0 a.m.4 views

iccDEV 安全漏洞

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.6 contained security vulnerabilities, which were caused by a stack buffer overflow in the CIccTagFixedNum::GetValues function...

6.2CVSS6AI score0.00033EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2026/03/26 3:3 p.m.0 views

CVE-2026-30987

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in CIccTagNum::GetValues causing stack memory corruption or crash. This vulnerability is fixed in 2.3.1.5...

7.8CVSS6AI score0.00018EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/10 5:59 p.m.0 views

EUVD-2026-10734

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in CIccTagNum::GetValues causing stack memory corruption or crash. This vulnerability is fixed in 2.3.1.5...

7.8CVSS6.1AI score0.00018EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/03/10 5:59 p.m.1 views

CVE-2026-30987 iccDEV has a stack buffer overflow in CIccTagNum<(icTagTypeSignature)>::GetValues()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in CIccTagNum::GetValues causing stack memory corruption or crash. This vulnerability is fixed in 2.3.1.5...

7.8CVSS6.1AI score0.00018EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/10 5:59 p.m.1 views

CVE-2026-30987

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in CIccTagNum::GetValues causing stack memory corruption or crash. This vulnerability is fixed in 2.3.1.5...

7.8CVSS6.1AI score0.00018EPSS
Exploits0References5Affected Software1
EUVD
EUVD
added 2026/03/10 5:59 p.m.0 views

EUVD-2026-10733

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in CIccTagNum::GetValues causing stack memory corruption or crash. This vulnerability is fixed in 2.3.1.5...

7.8CVSS6.1AI score0.00018EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/03/10 12:0 a.m.2 views

PT-2026-24356

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.5 Description iccDEV is a set of libraries and tools for working with ICC color management profiles. Versions prior to 2.3.1.5 contain a stack buffer overflow in the CIccTagNum::GetValues function, which can lead...

7.8CVSS6AI score0.00018EPSS
Exploits0References10
CNNVD
CNNVD
added 2026/03/10 12:0 a.m.3 views

iccDEV 缓冲区错误漏洞

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.5 contained a buffer error vulnerability. This vulnerability stems from the CIccTagNum::GetValues function, which has a stack buffer overflow issue,...

7.8CVSS6.1AI score0.00018EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/02/06 1:25 a.m.2 views

CVE-2026-25584

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a stack-buffer-overflow vulnerability in CIccTagFloatNum::GetValues. This is triggered when processing a malformed ICC...

7.8CVSS6AI score0.00008EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/02/04 10:11 p.m.3 views

CVE-2026-25584 iccDEV vulnerable to Stack-based Buffer Overflow in CIccTagFloatNum::GetValues()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a stack-buffer-overflow vulnerability in CIccTagFloatNum::GetValues. This is triggered when processing a malformed ICC...

7.8CVSS6AI score0.00008EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/02/04 10:11 p.m.24 views

CVE-2026-25584 iccDEV vulnerable to Stack-based Buffer Overflow in CIccTagFloatNum::GetValues()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a stack-buffer-overflow vulnerability in CIccTagFloatNum::GetValues. This is triggered when processing a malformed ICC...

7.8CVSS0.00008EPSS
Exploits1References4
CVE
CVE
added 2026/02/04 10:11 p.m.7 views

CVE-2026-25584

CVE-2026-25584 affects iccDEV prior to 2.3.1.3, where a stack-based buffer overflow occurs in the CIccTagFloatNum::GetValues()** when processing malformed ICC profiles. The issue allows an out-of-bounds write on the stack, potentially enabling memory corruption, information disclosure, or code ex...

7.8CVSS6AI score0.00008EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2026/02/04 10:11 p.m.3 views

CVE-2026-25584 iccDEV vulnerable to Stack-based Buffer Overflow in CIccTagFloatNum::GetValues()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a stack-buffer-overflow vulnerability in CIccTagFloatNum::GetValues. This is triggered when processing a malformed ICC...

7.8CVSS6.1AI score0.00008EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2026/02/04 12:0 a.m.2 views

PT-2026-6329

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.3 Description iccDEV is a set of libraries and tools for interacting with ICC color management profiles. A stack-buffer-overflow exists in the CIccTagFloatNum::GetValues function when processing a malformed ICC...

7.8CVSS6.1AI score0.00008EPSS
Exploits1References10
Rows per page
Query Builder