Lucene search
K

397 matches found

EUVD
EUVD
added 2026/01/06 12:11 a.m.4 views

EUVD-2026-1147

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have an infinite loop in the IccProfile.cpp function, CalcProfileID. This issue is fixed in version 2.3.1.1...

7.5CVSS6.2AI score0.00375EPSS
Exploits1References3
OSV
OSV
added 2026/01/06 12:11 a.m.2 views

CVE-2026-21507 iccDEV is Vulnerable to Denial of Service via Infinite Loop in CalcProfileID()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have an infinite loop in the IccProfile.cpp function, CalcProfileID. This issue is fixed in version 2.3.1.1...

7.5CVSS6.4AI score0.00375EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.4 views

iccDEV 代码问题漏洞

iccDEV is an open source color configuration code library from the International Color Consortium ICC. A code issue vulnerability exists in versions of iccDEV prior to 2.3.1.2, which stems from the presence of a null-pointer member call that could result in a null-pointer dereference...

5.5CVSS6.8AI score0.00161EPSS
Exploits1References6
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.2 views

iccDEV 安全漏洞

iccDEV is an open source color configuration code library from the International Color Consortium ICC. A security vulnerability exists in iccDEV 2.3.1 and earlier versions, which stems from an infinite loop in the CalcProfileID function of IccProfile.cpp, which could lead to a denial of service...

7.5CVSS6.6AI score0.00375EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.3 views

iccDEV 安全漏洞

iccDEV is an open source color configuration codebase from the International Color Consortium ICC. A security vulnerability exists in iccDEV 2.3.1 and earlier versions, which stems from a memory leak in the XML MPE parsing path that could lead to a memory leak...

5.5CVSS6.6AI score0.00154EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.4 views

iccDEV 安全漏洞

iccDEV is a color configuration codebase open-sourced by the International Color Consortium ICC. A security vulnerability exists in iccDEV 2.3.1 and earlier versions, which stems from the presence of post-release reuse in the CIccXform::Create function, which could lead to a post-release reuse...

9.8CVSS6.4AI score0.00387EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.3 views

iccDEV 缓冲区错误漏洞

iccDEV is a color configuration codebase open-sourced by the International Color Consortium ICC. A buffer error vulnerability exists in iccDEV version 2.3.1.1 and earlier, which stems from a post-release reuse, heap-based buffer overflow, and integer overflow or wrap-around error and out-of-bound...

7.8CVSS7.3AI score0.00133EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.3 views

iccDEV 安全漏洞

iccDEV is an open source color configuration code library from the International Color Consortium ICC. A security vulnerability exists in iccDEV version 2.3.1.1 and earlier, which stems from an out-of-bounds read, use of out-of-range pointer offsets, and improper input validation in the...

7.1CVSS6.9AI score0.0016EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.3 views

iccDEV 数字错误漏洞

iccDEV is an open source color configuration code library from the International Color Consortium ICC. A numeric error vulnerability exists in iccDEV version 2.3.1.1 and earlier, which stems from an out-of-bounds read and integer underflow in the CIccCalculatorFunc::SequenceNeedTempReset function...

7.1CVSS7AI score0.00112EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.3 views

iccDEV 安全漏洞

iccDEV is a color configuration codebase open-sourced by the International Color Consortium ICC. A security vulnerability exists in iccDEV version 2.3.1.1 and earlier, which stems from an out-of-bounds read, heap-based buffer overflow, and improper null termination in the CIccTagText::Read functi...

7.1CVSS6.9AI score0.00123EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/06 12:0 a.m.4 views

PT-2026-1504

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools for interacting with International Color Consortium ICC color management profiles. A flaw exists in versions before 2.3.1.2 that can lead to a unicode buffer...

6.1CVSS6.8AI score0.00185EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2026/01/06 12:0 a.m.2 views

PT-2026-1405

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and earlier contain Undefined Behavior UB and Out of Memory errors. Undefined Behavior refers ...

8.8CVSS6.6AI score0.00308EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2026/01/06 12:0 a.m.5 views

PT-2026-1395

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.1 Description iccDEV is a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a Use After Free issue in the CIccXform::Create function. The function deletes...

9.8CVSS7.2AI score0.00387EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2026/01/06 12:0 a.m.5 views

PT-2026-1432

Name of the Vulnerable Software and Affected Versions iccDEV versions 2.3.1.1 and below Description iccDEV is a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are susceptible to an Out-of-bounds Read, Heap-based Buffer Overflow, and Improper...

6.1CVSS6.7AI score0.00123EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/01/06 12:0 a.m.6 views

PT-2026-1433

Name of the Vulnerable Software and Affected Versions iccDEV versions 2.3.1.1 and below Description iccDEV is a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below contain Out-of-bounds Read and Integer Underflow vulnerabilities within the...

6.1CVSS6.7AI score0.00112EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/01/06 12:0 a.m.5 views

PT-2026-1511

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools for interacting with International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 contain a NULL pointer member call issue that...

5.5CVSS6.6AI score0.00161EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2026/01/06 12:0 a.m.5 views

PT-2026-1393

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.1 Description iccDEV is a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain overflows and underflows within the CIccXmlArrayType::ParseTextCountNum...

7.8CVSS6.6AI score0.00166EPSS
Exploits1References6
Rows per page
Query Builder