CVE-2026-21681

CVE-2026-21681 affects iccDEV, a library for ICC color management profiles. The vulnerability is caused by an Undefined Behavior runtime error in processing ICC profiles, occurring in versions prior to 2.3.1.2. A patch is provided in version 2.3.1.2; no public workarounds are noted. The CVE is tr...

EUVD-2026-1413

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a NULL pointer dereference vulnerability. This vulnerability affects users of the iccDEV libra...

CVE-2026-21680

The CVE-2026-21680 issue affects iccDEV: prior to version 2.3.1.2, a NULL pointer dereference occurs in CIccProfile::CheckTagTypes() when processing ICC color profiles. Version 2.3.1.2 contains a patch addressing this vulnerability; no public workarounds are documented. The related sources confir...

CVE-2026-21680 iccDEV has Null Pointer Dereference in CIccProfile::CheckTagTypes()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a NULL pointer dereference vulnerability. This vulnerability affects users of the iccDEV libra...

EUVD-2026-1403

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap-buffer-overflow in CIccLocalizedUnicode::GetText. This issue has been patched in version 2.3.1.2...

EUVD-2026-1398

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap-buffer-overflow vulnerability in IccTagXml. This issue has been patched in version 2.3.1.2...

EUVD-2026-1414

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV has undefined behavior due to an invalid enum value. This issue has been patched in version 2.3.1.2...

EUVD-2026-1412

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap buffer overflow in the ToneMap parser. This issue has been patched in version 2.3.1.2...

CVE-2026-21504 Heap Buffer Overflow in iccDEV ToneMap Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap buffer overflow in the ToneMap parser. This issue has been patched in version 2.3.1.2...

CVE-2026-21501 Stack Overflow in iccDEV Calculator Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to stack overflow in the calculator parser. This issue has been patched in version 2.3.1.2...

EUVD-2026-1405

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the XML tag parser. This issue has been patched in version 2.3.1.2...

CVE-2026-21502 NULL Pointer Dereference in iccDEV XML Tag Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the XML tag parser. This issue has been patched in version 2.3.1.2...

EUVD-2026-1407

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the XML parser. This issue has been patched in version 2.3.1.2...

EUVD-2026-1410

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via an unknown tag parser. This issue has been patched in version 2.3.1.2...

CVE-2025-47552

creationtimestamp| type| source ---|---|--- 2026-01-07 14:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbtmw2b6k62f 2026-01-07 14:01:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbtmwy5h4x2f 2026-01-07 14:05:15+00:00| seen|...

CVE-2026-21858

creationtimestamp| type| source ---|---|--- 2026-01-07 12:48:00+00:00| seen| https://thehackernews.com/2026/01/critical-n8n-vulnerability-cvss-100.html 2026-01-07 15:20:10+00:00| seen| https://bsky.app/profile/cybersentinel404.bsky.social/post/3mbtrdz5mxv24 2026-01-07 15:20:49+00:00|...

CVE-2024-2933

The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Social Profiles widget in all versions up to, and including, 3.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...

CVE-2026-21673

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have overflows and underflows in CIccXmlArrayType::ParseTextCountNum. This vulnerability affects users of the iccDEV library who process ICC color profiles. This issue is fixed in...

CVE-2025-69263

creationtimestamp| type| source ---|---|--- 2026-01-07 00:38:43+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-7vhp-vf5g-r2fw 2026-01-07 22:56:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbukta7kpl22 2026-01-07 23:09:29+00:00| seen|...

CVE-2025-69264

creationtimestamp| type| source ---|---|--- 2026-01-07 00:38:31+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-379q-355j-w6rj 2026-01-07 23:09:29+00:00| seen| Telegram/FpDGAESLT2b6cAqL19jI0amMTjRd3R14Wu3P5pTmHCNxdqI 2026-01-07 23:11:17+00:00| seen|...