Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/01/26 3:10 p.m.5 views

CVE-2026-24411

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have Undefined Behavior in CIccTagXmlSegmentedCurve::ToXml. This occurs when user-controllable input is unsafely incorporated into ICC profile data or oth...

8.8CVSS5.8AI score0.00241EPSS
Exploits1References1
CVE
CVE
added 2026/01/24 1:16 a.m.13 views

CVE-2026-24411

CVE-2026-24411 affects iccDEV. Versions 2.3.1.1 and earlier have Undefined Behavior in CIccTagXmlSegmentedCurve::ToXml() when user-controllable input is embedded in ICC profile data or other structured binaries, potentially enabling DoS, data manipulation, bypass of application logic, and Code Ex...

8.8CVSS5.5AI score0.00241EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2026/01/24 1:16 a.m.4 views

CVE-2026-24411 iccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlSegmentedCurve::ToXml()

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have Undefined Behavior in CIccTagXmlSegmentedCurve::ToXml. This occurs when user-controllable input is unsafely incorporated into ICC profile data or oth...

7.1CVSS5.6AI score0.00241EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/01/07 9:58 p.m.2 views

CVE-2026-21693 iccDEV has Type Confusion in CIccSegmentedCurveXml::ToXml() at IccXML/IccLibXML/IccMpeXml.cpp

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in CIccSegmentedCurveXml::ToXml at...

8.8CVSS6.4AI score0.00113EPSS
Exploits1References3
OSV
OSV
added 2026/01/07 9:58 p.m.3 views

CVE-2026-21693 iccDEV has Type Confusion in CIccSegmentedCurveXml::ToXml() at IccXML/IccLibXML/IccMpeXml.cpp

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in CIccSegmentedCurveXml::ToXml at...

8.8CVSS6.7AI score0.00113EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/01/07 9:58 p.m.17 views

CVE-2026-21693 iccDEV has Type Confusion in CIccSegmentedCurveXml::ToXml() at IccXML/IccLibXML/IccMpeXml.cpp

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in CIccSegmentedCurveXml::ToXml at...

8.8CVSS0.00113EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.2 views

iccDEV 安全漏洞

iccDEV is an open source color configuration code library from the International Color Consortium. A security vulnerability exists in iccDEV versions prior to 2.3.1.2, which stems from a type confusion in the CIccSegmentedCurveXml::ToXml function in the IccXML/IccLibXML/IccMpeXml.cpp file...

8.8CVSS6.7AI score0.00113EPSS
Exploits1References3
Rows per page
Query Builder