Vulnerabilities (CVE)

Filtered by vendor Color Subscribe
Filtered by product Iccdev
Total 104 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-21488 1 Color 1 Iccdev 2026-06-17 N/A 6.1 MEDIUM
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are vulnerable to Out-of-bounds Read, Heap-based Buffer Overflow and Improper Null Termination through its CIccTagText::Read function. This issue is fixed in version 2.3.1.2.
CVE-2026-21487 1 Color 1 Iccdev 2026-06-17 N/A 6.1 MEDIUM
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below have an Out-of-bounds Read, Use of Out-of-range Pointer Offset and have Improper Input Validation in its CIccProfile::LoadTag function. This issue is fixed in version 2.3.1.2.
CVE-2026-21486 1 Color 1 Iccdev 2026-06-17 N/A 7.8 HIGH
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below contain Use After Free, Heap-based Buffer Overflow and Integer Overflow or Wraparound and Out-of-bounds Write vulnerabilities in its CIccSparseMatrix::CIccSparseMatrix function. This issue is fixed in version 2.3.1.2.
CVE-2026-21485 1 Color 1 Iccdev 2026-06-17 N/A 8.8 HIGH
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are prone to have Undefined Behavior (UB) and Out of Memory errors. This issue is fixed in version 2.3.1.2.