Lucene search
+L

3178 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/07 12:00 a.m.•2 views

CVE-2026-21686: Improper Input Validation

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have Undefined Behavior in CIccTagLutAtoB::Validate. This vulnerability affects users of the iccDEV...

7.1CVSS5.9AI score0.00284EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/01/07 12:00 a.m.•9 views

iccDEV 安全漏洞

iccDEV is an open source color configuration codebase from the International Color Consortium ICC. A security vulnerability exists in iccDEV versions prior to 2.3.1.2, which stems from an invalid enumeration value leading to undefined behavior...

7.8CVSS6.7AI score0.00195EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/07 12:00 a.m.•2 views

CVE-2026-21681: Improper Input Validation

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a Undefined Behavior runtime error. This vulnerability affects users of the iccDEV library who...

7.1CVSS5.9AI score0.00205EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/07 12:00 a.m.•2 views

CVE-2026-21684: Improper Input Validation

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have Undefined Behavior in CIccTagSpectralViewingConditions. This vulnerability affects users of th...

7.1CVSS5.9AI score0.00284EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/01/07 12:00 a.m.•15 views

PT-2026-2071

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools used for interacting with, manipulating, and applying ICC color management profiles. Versions prior to 2.3.1.2 exhibit undefined behavior due to an invalid enu...

7.8CVSS6.6AI score0.00195EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2026/01/07 12:00 a.m.•21 views

PT-2026-2082

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools for interacting with International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 contain Undefined Behavior in the CIccTagLut16::Re...

7.1CVSS6.6AI score0.00284EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/01/07 12:00 a.m.•23 views

PT-2026-2083

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools for interacting with International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 contain Undefined Behavior in the...

7.1CVSS6.6AI score0.00284EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2026/01/07 12:00 a.m.•20 views

iccDEV 输入验证错误漏洞

iccDEV is an open source color configuration code base from the International Color Consortium. An input validation error vulnerability exists in versions of iccDEV prior to 2.3.1.2 that stems from the presence of an undefined behavior runtime error...

7.1CVSS6.9AI score0.00205EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/07 12:00 a.m.•3 views

CVE-2026-21505: Improper Input Validation

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV has undefined behavior due to an invalid enum value. This issue has been patched in version 2.3.1.2...

7.8CVSS5.7AI score0.00195EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/07 12:00 a.m.•3 views

CVE-2026-21503: Improper Input Validation

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV has undefined behavior due to a null pointer passed to memcpy in CIccTagSparseMatrixArray. This issue has been patched in...

6.1CVSS5.5AI score0.00184EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/07 12:00 a.m.•4 views

CVE-2026-21687: Improper Input Validation

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have Undefined Behavior in CIccTagCurve::CIccTagCurve. This vulnerability affects users of the iccD...

7.1CVSS5.9AI score0.00284EPSS
SaveExploits1References1
NVD
NVD
•added 2026/01/06 4:15 a.m.•19 views

CVE-2026-21677

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have Undefined Behavior in its CIccCLUT::Init function which initializes and sets the size of a CLUT. This issue is fixed in version 2.3.1.1...

8.8CVSS0.0036EPSS
SaveExploits1References3
NVD
NVD
•added 2026/01/06 4:15 a.m.•20 views

CVE-2026-21485

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are prone to have Undefined Behavior UB and Out of Memory errors. This issue is fixed in version 2.3.1.2...

8.8CVSS0.0036EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/01/06 3:17 a.m.•48 views

CVE-2026-21485 iccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are prone to have Undefined Behavior UB and Out of Memory errors. This issue is fixed in version 2.3.1.2...

8.8CVSS0.0036EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/01/06 3:17 a.m.•14 views

EUVD-2026-1153

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are prone to have Undefined Behavior UB and Out of Memory errors. This issue is fixed in version 2.3.1.2...

8.8CVSS6.3AI score0.0036EPSS
SaveExploits1References3
CVE
CVE
•added 2026/01/06 3:17 a.m.•40 views

CVE-2026-21485

CVE-2026-21485 affects iccDEV: versions 2.3.1.1 and earlier expose Undefined Behavior (UB) and Out of Memory errors, notably in CIccProfile::LoadTag(). The issue is fixed in v2.3.1.2. Red Hat and other feeds corroborate the same description. Impact is tied to how ICC color management profiles are...

8.8CVSS6.4AI score0.0036EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/06 3:17 a.m.•7 views

CVE-2026-21485 iccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are prone to have Undefined Behavior UB and Out of Memory errors. This issue is fixed in version 2.3.1.2...

8.8CVSS6.4AI score0.0036EPSS
SaveExploits1References3
OSV
OSV
•added 2026/01/06 3:17 a.m.•9 views

CVE-2026-21485 iccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are prone to have Undefined Behavior UB and Out of Memory errors. This issue is fixed in version 2.3.1.2...

8.8CVSS6.5AI score
SaveExploits0References5
CVE
CVE
•added 2026/01/06 3:11 a.m.•36 views

CVE-2026-21677

CVE-2026-21677 affects iccDEV. Versions prior to 2.3.1 have Undefined Behavior in CIccCLUT::Init that initializes and sets the size of a CLUT; this is fixed in version 2.3.1.1. Red Hat and NVD entries describe the issue consistently. The CVSS base score is 8.8 (HIGH) with network attack vector, n...

8.8CVSS6.4AI score0.0036EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
•added 2026/01/06 3:11 a.m.•15 views

EUVD-2026-1152

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have Undefined Behavior in its CIccCLUT::Init function which initializes and sets the size of a CLUT. This issue is fixed in version 2.3.1.1...

8.8CVSS6.2AI score0.0036EPSS
SaveExploits1References3
Rows per page
Query Builder