Lucene search
+L

24 matches found

NVD
NVD
•added 2026/08/21 3:16 p.m.•21 views

CVE-2026-50278

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions prior to 2.3.2.1 have a CIccEmbedIO::Read8 sizet underflow. The issue arises due to an embedded-profile read defect when parsing ICC profiles containing icSigEmbeddedV5ProfileTag data with...

6.5CVSS0.00452EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/21 2:57 p.m.•47 views

CVE-2026-50278 iccDEV: CIccEmbedIO::Read8() size_t underflow

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions prior to 2.3.2.1 have a CIccEmbedIO::Read8 sizet underflow. The issue arises due to an embedded-profile read defect when parsing ICC profiles containing icSigEmbeddedV5ProfileTag data with...

6.5CVSS0.00452EPSS
SaveExploits0References3
CVE
CVE
•added 2026/08/21 2:57 p.m.•49 views

CVE-2026-50278

iccDEV versions prior to 2.3.2.1 contain a size_t underflow in CIccEmbedIO::Read8(), triggered when parsing ICC profiles that include icSigEmbeddedV5ProfileTag data with icSigEmbeddedProfileType payloads. The defect is an embedded-profile read issue that can lead to denial of service (availabilit...

6.5CVSS5.9AI score0.00452EPSS
SaveExploits0References3
Mend
Mend
•added 2026/08/21 2:57 p.m.•12 views

CVE-2026-50278

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions prior to 2.3.2.1 have a "CIccEmbedIO::Read8" sizet underflow. The issue arises due to an embedded-profile read defect when parsing ICC profiles containing "icSigEmbeddedV5ProfileTag" data with...

7.1CVSS5.9AI score0.00452EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/08/21 2:57 p.m.•16 views

CVE-2026-50278 iccDEV: CIccEmbedIO::Read8() size_t underflow

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions prior to 2.3.2.1 have a CIccEmbedIO::Read8 sizet underflow. The issue arises due to an embedded-profile read defect when parsing ICC profiles containing icSigEmbeddedV5ProfileTag data with...

6.5CVSS5.9AI score0.00452EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/21 2:57 p.m.•27 views

EUVD-2026-63990

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions prior to 2.3.2.1 have a CIccEmbedIO::Read8 sizet underflow. The issue arises due to an embedded-profile read defect when parsing ICC profiles containing icSigEmbeddedV5ProfileTag data with...

6.5CVSS5.9AI score0.00452EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/21 12:00 a.m.•9 views

CVE-2026-50278: Out-of-bounds Read

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions prior to 2.3.2.1 have a CIccEmbedIO::Read8 sizet underflow. The issue arises due to an embedded-profile read defect when parsing ICC profiles containing icSigEmbeddedV5ProfileTag data with...

6.5CVSS5.9AI score0.00452EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/21 12:00 a.m.•32 views

PT-2026-79390

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions prior to 2.3.2.1 have a CIccEmbedIO::Read8 size t underflow. The issue arises due to an embedded-profile read defect when parsing ICC profiles containing icSigEmbeddedV5ProfileTag data with...

6.5CVSS5.9AI score0.00452EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2026/03/06 12:00 a.m.•19 views

rtl8712 usb_read8 function DoS

The vulnerability of the usbread8 function in the drivers/staging/rtl8712/usbops.c module, which supports additional devices in the Linux operating system, is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00262EPSS
SaveExploits0References16Affected Software2
NVD
NVD
•added 2026/02/04 10:16 p.m.•24 views

CVE-2026-25583

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow vulnerability in CIccFileIO::Read8 when processing malformed ICC profile files via unchecked fread...

7.8CVSS0.0025EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/02/04 10:08 p.m.•7 views

CVE-2026-25583 iccDEV vulnerable to Heap Buffer Overflow in CIccFileIO::Read8()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow vulnerability in CIccFileIO::Read8 when processing malformed ICC profile files via unchecked fread...

7.8CVSS6.1AI score0.0025EPSS
SaveExploits1References4
CVE
CVE
•added 2026/02/04 10:08 p.m.•43 views

CVE-2026-25583

The CVE-2026-25583 issue affects iccDEV, where a heap buffer overflow can occur in CIccFileIO::Read8() when processing malformed ICC profile files due to an unchecked fread. This vulnerability is present in versions prior to 2.3.1.3 and is patched in 2.3.1.3. Red Hat and CVE records corroborate t...

7.8CVSS6.1AI score0.0025EPSS
SaveExploits1References4Affected Software1
attackerkb
attackerkb
•added 2026/02/04 10:08 p.m.•11 views

CVE-2026-25583

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow vulnerability in CIccFileIO::Read8 when processing malformed ICC profile files via unchecked fread...

7.8CVSS6.1AI score0.0025EPSS
SaveExploits1References5Affected Software1
osv_cve
osv_cve
•added 2026/02/04 10:08 p.m.•21 views

CVE-2026-25583 iccDEV vulnerable to Heap Buffer Overflow in CIccFileIO::Read8()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow vulnerability in CIccFileIO::Read8 when processing malformed ICC profile files via unchecked fread...

7.8CVSS5.6AI score
SaveExploits0References6
CNNVD
CNNVD
•added 2026/02/04 12:00 a.m.•26 views

iccDEV buffer error vulnerability

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.3 contained a buffer error vulnerability. This vulnerability stemmed from a heap buffer overflow in the CIccFileIO::Read8 function, which could lead to memo...

7.8CVSS6.6AI score0.0025EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/04 12:00 a.m.•10 views

CVE-2026-25583: Improper Restriction of Operations within the Bounds of a Memory Buffer

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow vulnerability in CIccFileIO::Read8 when processing malformed ICC profile files via unchecked fread...

7.8CVSS6.1AI score0.0025EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/02/04 12:00 a.m.•24 views

PT-2026-6328

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.3 Description iccDEV is a set of libraries and tools for interacting with ICC color management profiles. A heap buffer overflow exists in the CIccFileIO::Read8 function when processing improperly formed ICC profi...

7.8CVSS6.1AI score0.0025EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•8 views

PT-2022-31472

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue is related to an uninit-value in the usb read8 function and similar functions in the rtl8712 staging driver. The actual impact and attack plausibility have not yet been proven...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•3 views

PT-2022-31941

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to an uninit-value in the usb read8 function and similar functions in the rtl8712 staging driver. The actual impact and potential for attack have not been proven yet...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•4 views

PT-2022-31732

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description The issue is related to an uninit-value in the usb read8 function and similar functions in the rtl8712 staging driver. The actual impact and attack plausibility have not yet been proven...

5.8AI score
SaveExploits0References1
Rows per page
Query Builder