Lucene search
K

7 matches found

NVD
NVD
added 2026/02/04 10:16 p.m.4 views

CVE-2026-25583

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow vulnerability in CIccFileIO::Read8 when processing malformed ICC profile files via unchecked fread...

7.8CVSS0.00007EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/02/04 10:8 p.m.2 views

CVE-2026-25583

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow vulnerability in CIccFileIO::Read8 when processing malformed ICC profile files via unchecked fread...

7.8CVSS5.6AI score0.00007EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2026/02/04 10:8 p.m.5 views

CVE-2026-25583

The CVE-2026-25583 issue affects iccDEV, where a heap buffer overflow can occur in CIccFileIO::Read8() when processing malformed ICC profile files due to an unchecked fread. This vulnerability is present in versions prior to 2.3.1.3 and is patched in 2.3.1.3. Red Hat and CVE records corroborate t...

7.8CVSS5.6AI score0.00007EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2026/02/04 10:8 p.m.2 views

CVE-2026-25583 iccDEV vulnerable to Heap Buffer Overflow in CIccFileIO::Read8()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow vulnerability in CIccFileIO::Read8 when processing malformed ICC profile files via unchecked fread...

7.8CVSS5.6AI score0.00007EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2026/02/04 10:8 p.m.2 views

CVE-2026-25583 iccDEV vulnerable to Heap Buffer Overflow in CIccFileIO::Read8()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow vulnerability in CIccFileIO::Read8 when processing malformed ICC profile files via unchecked fread...

7.8CVSS5.6AI score0.00007EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/02/04 12:0 a.m.3 views

iccDEV 缓冲区错误漏洞

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.3 contained a buffer error vulnerability. This vulnerability stemmed from a heap buffer overflow in the CIccFileIO::Read8 function, which could lead to memo...

7.8CVSS6.1AI score0.00007EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/02/04 12:0 a.m.3 views

PT-2026-6328

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.3 Description iccDEV is a set of libraries and tools for interacting with ICC color management profiles. A heap buffer overflow exists in the CIccFileIO::Read8 function when processing improperly formed ICC profi...

7.8CVSS5.7AI score0.00007EPSS
Exploits1References10
Rows per page
Query Builder