Lucene search
+L

402 matches found

Cvelist
Cvelist
added 2026/01/07 5:50 p.m.47 views

CVE-2026-21680 iccDEV has Null Pointer Dereference in CIccProfile::CheckTagTypes()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a NULL pointer dereference vulnerability. This vulnerability affects users of the iccDEV libra...

6.5CVSS0.00309EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/01/07 5:11 p.m.6 views

CVE-2026-21679 iccDEV has heap-buffer-overflow vulnerability in CIccLocalizedUnicode::GetText()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap-buffer-overflow in CIccLocalizedUnicode::GetText. This issue has been patched in version 2.3.1.2...

8.8CVSS6.5AI score0.00375EPSS
SaveExploits1References4
OSV
OSV
added 2026/01/07 5:11 p.m.15 views

CVE-2026-21679 iccDEV has heap-buffer-overflow vulnerability in CIccLocalizedUnicode::GetText()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap-buffer-overflow in CIccLocalizedUnicode::GetText. This issue has been patched in version 2.3.1.2...

8.8CVSS6.6AI score
SaveExploits0References6
CVE
CVE
added 2026/01/07 5:11 p.m.41 views

CVE-2026-21679

CVE-2026-21679 affects the iccDEV library prior to version 2.3.1.2, where CIccLocalizedUnicode::GetText() is vulnerable to a heap-buffer-overflow. The issue has been patched in version 2.3.1.2. The vulnerability is documented across multiple sources (NVD, Red Hat, CIRCL, OSV, CVE listings) with c...

9.8CVSS6.5AI score0.00375EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2026/01/07 5:11 p.m.49 views

CVE-2026-21678 iccDEV has heap-buffer-overflow vulnerability on IccTagXml()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap-buffer-overflow vulnerability in IccTagXml. This issue has been patched in version 2.3.1.2...

7.8CVSS0.00194EPSS
SaveExploits1References4
OSV
OSV
added 2026/01/07 5:11 p.m.13 views

CVE-2026-21678 iccDEV has heap-buffer-overflow vulnerability on IccTagXml()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap-buffer-overflow vulnerability in IccTagXml. This issue has been patched in version 2.3.1.2...

7.8CVSS6.6AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/01/07 5:11 p.m.6 views

CVE-2026-21678 iccDEV has heap-buffer-overflow vulnerability on IccTagXml()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap-buffer-overflow vulnerability in IccTagXml. This issue has been patched in version 2.3.1.2...

7.8CVSS6.5AI score0.00194EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/01/07 5:10 p.m.33 views

CVE-2026-21506 iccDEV is Vulnerable to Null Pointer Dereference in CIccProfileXml::ParseBasic() Leading to Denial of Service

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to Null pointer dereference in CIccProfileXml::ParseBasic, leading to denial of service. This issue has been...

5.5CVSS0.00184EPSS
SaveExploits1References4
CVE
CVE
added 2026/01/07 5:10 p.m.42 views

CVE-2026-21506

CVE-2026-21506 (iccDEV) concerns a null pointer dereference in CIccProfileXml::ParseBasic() affecting iccDEV versions prior to 2.3.1.2, leading toDenial of Service. The issue is confirmed across multiple sources (Red Hat advisory, NVD entry, CVE records) and is documented as a vulnerability in th...

5.5CVSS6.4AI score0.00184EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/07 5:10 p.m.6 views

CVE-2026-21505 iccDEV has Undefined Behavior (UB) - Invalid Enum Value

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV has undefined behavior due to an invalid enum value. This issue has been patched in version 2.3.1.2...

5.5CVSS6.4AI score0.00195EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/01/07 5:10 p.m.45 views

CVE-2026-21505 iccDEV has Undefined Behavior (UB) - Invalid Enum Value

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV has undefined behavior due to an invalid enum value. This issue has been patched in version 2.3.1.2...

5.5CVSS0.00195EPSS
SaveExploits1References5
OSV
OSV
added 2026/01/07 5:10 p.m.9 views

CVE-2026-21505 iccDEV has Undefined Behavior (UB) - Invalid Enum Value

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV has undefined behavior due to an invalid enum value. This issue has been patched in version 2.3.1.2...

5.5CVSS6.6AI score
SaveExploits0References7
Cvelist
Cvelist
added 2026/01/07 5:10 p.m.36 views

CVE-2026-21503 iccDEV has Undefined Behavior - Null Pointer Passed to memcpy() in CIccTagSparseMatrixArray

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV has undefined behavior due to a null pointer passed to memcpy in CIccTagSparseMatrixArray. This issue has been patched in...

6.1CVSS0.00184EPSS
SaveExploits1References4
CVE
CVE
added 2026/01/07 5:10 p.m.39 views

CVE-2026-21503

iccDEV is affected by undefined behavior prior to version 2.3.1.2 due to a null pointer passed to memcpy() in CIccTagSparseMatrixArray. The issue has been patched in version 2.3.1.2. Affected scope: iccDEV library/tooling for ICC color management profiles. Impact is defined as undefined behavior ...

6.1CVSS6.4AI score0.00184EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2026/01/07 5:10 p.m.45 views

CVE-2026-21504 Heap Buffer Overflow in iccDEV ToneMap Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap buffer overflow in the ToneMap parser. This issue has been patched in version 2.3.1.2...

6.6CVSS0.00214EPSS
SaveExploits1References6
OSV
OSV
added 2026/01/07 5:10 p.m.11 views

CVE-2026-21504 Heap Buffer Overflow in iccDEV ToneMap Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap buffer overflow in the ToneMap parser. This issue has been patched in version 2.3.1.2...

6.6CVSS7.2AI score
SaveExploits0References8
OSV
OSV
added 2026/01/07 5:09 p.m.14 views

CVE-2026-21502 NULL Pointer Dereference in iccDEV XML Tag Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the XML tag parser. This issue has been patched in version 2.3.1.2...

5.5CVSS6.7AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2026/01/07 5:09 p.m.10 views

CVE-2026-21502 NULL Pointer Dereference in iccDEV XML Tag Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the XML tag parser. This issue has been patched in version 2.3.1.2...

5.5CVSS6.5AI score0.00184EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/01/07 5:09 p.m.34 views

CVE-2026-21502 NULL Pointer Dereference in iccDEV XML Tag Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the XML tag parser. This issue has been patched in version 2.3.1.2...

5.5CVSS0.00184EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/01/07 5:09 p.m.48 views

CVE-2026-21500 Stack Overflow in iccDEV XML Calculator Macro Expansion

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to stack overflow in the XML calculator macro expansion. This issue has been patched in version 2.3.1.2...

5.5CVSS0.00216EPSS
SaveExploits1References5
Rows per page
Query Builder