Lucene search
K

397 matches found

Cvelist
Cvelist
added 2026/01/07 5:9 p.m.23 views

CVE-2026-21499 NULL Pointer Dereference in iccDEV XML Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the XML parser. This issue has been patched in version 2.3.1.2...

5.5CVSS0.00155EPSS
Exploits1References6
OSV
OSV
added 2026/01/07 5:9 p.m.5 views

CVE-2026-21498 NULL Pointer Dereference in iccDEV XML Calculator Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the XML calculator parser. This issue has been patched in version 2.3.1.2...

5.5CVSS6.7AI score0.00155EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2026/01/07 5:9 p.m.4 views

CVE-2026-21498 NULL Pointer Dereference in iccDEV XML Calculator Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the XML calculator parser. This issue has been patched in version 2.3.1.2...

5.5CVSS6.5AI score0.00155EPSS
Exploits1References5
EUVD
EUVD
added 2026/01/07 5:9 p.m.3 views

EUVD-2026-1408

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the XML calculator parser. This issue has been patched in version 2.3.1.2...

5.5CVSS6.4AI score0.00155EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/01/07 5:9 p.m.22 views

CVE-2026-21498 NULL Pointer Dereference in iccDEV XML Calculator Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the XML calculator parser. This issue has been patched in version 2.3.1.2...

5.5CVSS0.00155EPSS
Exploits1References5
CVE
CVE
added 2026/01/07 5:9 p.m.16 views

CVE-2026-21496

CVE-2026-21496 affects iccDEV prior to 2.3.1.2. The vulnerability is a NULL pointer dereference in the signature parser, which can trigger a crash. Red Hat, NVD, and other sources corroborate that this issue was patched in version 2.3.1.2. Relevant impact is listed as Availability High, with othe...

5.5CVSS6.5AI score0.00155EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2026/01/07 5:9 p.m.21 views

CVE-2026-21496 NULL Pointer Dereference in iccDEV Signature Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the signature parser. This issue has been patched in version 2.3.1.2...

5.5CVSS0.00155EPSS
Exploits1References5
OSV
OSV
added 2026/01/07 5:9 p.m.4 views

CVE-2026-21496 NULL Pointer Dereference in iccDEV Signature Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the signature parser. This issue has been patched in version 2.3.1.2...

5.5CVSS6.7AI score0.00155EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2026/01/07 5:8 p.m.4 views

CVE-2026-21497 NULL Pointer Dereference in iccDEV Unknown Tag Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via an unknown tag parser. This issue has been patched in version 2.3.1.2...

5.5CVSS6.4AI score0.00155EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/01/07 5:8 p.m.23 views

CVE-2026-21497 NULL Pointer Dereference in iccDEV Unknown Tag Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via an unknown tag parser. This issue has been patched in version 2.3.1.2...

5.5CVSS0.00155EPSS
Exploits1References4
OSV
OSV
added 2026/01/07 5:8 p.m.4 views

CVE-2026-21497 NULL Pointer Dereference in iccDEV Unknown Tag Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via an unknown tag parser. This issue has been patched in version 2.3.1.2...

5.5CVSS6.7AI score0.00155EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2026/01/07 5:8 p.m.3 views

CVE-2026-21495 Division by Zero in iccDEV TIFF Image Reader

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to division by zero in the TIFF Image Reader. This issue has been patched in version 2.3.1.2...

5.5CVSS6.5AI score0.00105EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/07 9:10 a.m.4 views

CVE-2026-21675

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a Use After Free vulnerability in the CIccXform::Create function, where it deletes the hint. This issue is fixed in version 2.3.1.1...

9.8CVSS6.7AI score0.00387EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:10 a.m.4 views

CVE-2026-21486

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below contain Use After Free, Heap-based Buffer Overflow and Integer Overflow or Wraparound and Out-of-bounds Write vulnerabilities in its CIccSparseMatrix::CIccSparseMatrix function...

7.8CVSS6.9AI score0.00133EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:10 a.m.3 views

CVE-2026-21673

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have overflows and underflows in CIccXmlArrayType::ParseTextCountNum. This vulnerability affects users of the iccDEV library who process ICC color profiles. This issue is fixed in...

7.8CVSS6.8AI score0.00166EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:10 a.m.4 views

CVE-2026-21485

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are prone to have Undefined Behavior UB and Out of Memory errors. This issue is fixed in version 2.3.1.2...

8.8CVSS6.8AI score0.00308EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:10 a.m.3 views

CVE-2026-21676

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have a Heap-based Buffer Overflow in its CIccMBB::Validate function which checks tag data validity. This issue is fixed in version 2.3.1.1...

8.8CVSS6.8AI score0.00342EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:10 a.m.5 views

CVE-2026-21507

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have an infinite loop in the IccProfile.cpp function, CalcProfileID. This issue is fixed in version 2.3.1.1...

7.5CVSS6.7AI score0.00375EPSS
Exploits1References1
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.2 views

iccDEV 代码问题漏洞

iccDEV is an open source color configuration code library from International Color Consortium. A code issue vulnerability exists in iccDEV versions prior to 2.3.1.2, which stems from a type confusion in the CIccProfileXml::ParseBasic function in the IccXML/IccLibXML/IccProfileXml.cpp file...

6.5CVSS6.8AI score0.00273EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.6 views

iccDEV 安全漏洞

iccDEV is an open source color configuration code base from the International Color Consortium. A security vulnerability exists in iccDEV versions prior to 2.3.1.2, which stems from a type confusion in the CIccTagXmlTagData::ToXml function...

6.3CVSS6.8AI score0.0019EPSS
Exploits1References3
Rows per page
Query Builder