Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:9 a.m.1 views

CVE-2026-21504

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap buffer overflow in the ToneMap parser. This issue has been patched in version 2.3.1.2...

6.6CVSS7.3AI score0.00015EPSS
Exploits1References1
NVD
NVD
added 2026/01/07 6:15 p.m.2 views

CVE-2026-21504

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap buffer overflow in the ToneMap parser. This issue has been patched in version 2.3.1.2...

7.8CVSS0.00015EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2026/01/07 5:10 p.m.3 views

CVE-2026-21504 Heap Buffer Overflow in iccDEV ToneMap Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap buffer overflow in the ToneMap parser. This issue has been patched in version 2.3.1.2...

6.6CVSS7AI score0.00015EPSS
Exploits1References6
CVE
CVE
added 2026/01/07 5:10 p.m.6 views

CVE-2026-21504

CVE-2026-21504 affects iccDEV before 2.3.1.2, where the ToneMap parser contains a heap buffer overflow vulnerability. Multiple sources (NVD, Red Hat, CVE lists, OSV) confirm the issue and indicate it has been patched in 2.3.1.2. Affected software: iccDEV libraries/tools for ICC color management p...

7.8CVSS7AI score0.00015EPSS
Exploits1References6Affected Software1
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.2 views

iccDEV 缓冲区错误漏洞

iccDEV is a color configuration codebase open-sourced by the International Color Consortium ICC. A buffer error vulnerability exists in versions prior to iccDEV 2.3.1.2, which stems from a heap buffer overflow in the ToneMap parser...

7.8CVSS7.1AI score0.00015EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.4 views

PT-2026-2070

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools used for interacting with, manipulating, and applying ICC color management profiles. A heap buffer overflow exists in the ToneMap parser in versions prior to...

7.8CVSS7.1AI score0.00015EPSS
Exploits1References9
Rows per page
Query Builder