CVE-2026-24409

creationtimestamp| type| source ---|---|--- 2026-01-24 03:39:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md5c3wrptr2c...

CVE-2026-24409 iccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlFloatNum<>::ParseXml()

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have Undefined Behavior and Null Pointer Deference in CIccTagXmlFloatNum::ParseXml. This occurs when user-controllable input is unsafely incorporated into...