Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 8:38 a.m.1 views

CVE-2026-21678

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap-buffer-overflow vulnerability in IccTagXml. This issue has been patched in version 2.3.1.2...

7.8CVSS6.8AI score0.00041EPSS
Exploits1References1
NVD
NVD
added 2026/01/07 6:15 p.m.4 views

CVE-2026-21678

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap-buffer-overflow vulnerability in IccTagXml. This issue has been patched in version 2.3.1.2...

7.8CVSS0.00041EPSS
Exploits1References4
OSV
OSV
added 2026/01/07 5:11 p.m.1 views

CVE-2026-21678 iccDEV has heap-buffer-overflow vulnerability on IccTagXml()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap-buffer-overflow vulnerability in IccTagXml. This issue has been patched in version 2.3.1.2...

7.8CVSS6.6AI score0.00041EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2026/01/07 5:11 p.m.2 views

CVE-2026-21678 iccDEV has heap-buffer-overflow vulnerability on IccTagXml()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap-buffer-overflow vulnerability in IccTagXml. This issue has been patched in version 2.3.1.2...

7.8CVSS6.5AI score0.00041EPSS
Exploits1References4
CVE
CVE
added 2026/01/07 5:11 p.m.5 views

CVE-2026-21678

CVE-2026-21678 affects iccDEV prior to 2.3.1.2, where a heap-buffer-overflow occurs in IccTagXml(). The issue has been patched in version 2.3.1.2. The vulnerability is characterized as a HIGH-severity CVSSv3.1 issue with LOCAL attack vector, NO privileges required, and user interaction required. ...

7.8CVSS6.5AI score0.00041EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.1 views

iccDEV 缓冲区错误漏洞

iccDEV is an open source color configuration codebase from the International Color Consortium. A buffer error vulnerability exists in versions prior to iccDEV 2.3.1.2, which stems from a heap buffer overflow in IccTagXml...

7.8CVSS7AI score0.00041EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.2 views

PT-2026-2075

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools for interacting with ICC color management profiles. A heap-buffer-overflow issue exists in the IccTagXml function in versions prior to 2.3.1.2. Recommendations...

7.8CVSS6.6AI score0.00041EPSS
Exploits1References8
Rows per page
Query Builder