Internationalcolorconsortium Iccdev vulnerabilities, page 2
105 vulnerabilities
Known vulnerabilities in Internationalcolorconsortium Iccdev, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CriticalCVE-2026-21675color · iccdev +1 moreiccDEV has a Use After Free vulnerability in CIccCmm class via improper hint manager object deletioniccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a Use After Free vulnerability in the CIccXform::Create() function, where it deletes the hint. This issue is fixed in version 2.3.1.1.EPSS0.45%HighCVE-2026-21684color · iccdev +1 moreiccDEV has Undefined Behavior in CIccTagSpectralViewingConditions()iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have Undefined Behavior in `CIccTagSpectralViewingConditions()`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.EPSS0.29%HighCVE-2026-21488color · iccdev +1 moreiccDEV has Out-of-bounds Read, Heap-based Buffer Overflow and Improper Null TerminationiccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are vulnerable to Out-of-bounds Read, Heap-based Buffer Overflow and Improper Null Termination through its CIccTagText::Read function. This issue is fixed in version 2.3.1.2.EPSS0.15%HighCVE-2026-21673color · iccdev +1 moreiccDEV has Integer Overflow/Underflow in CIccXmlArrayType::ParseTextCountNum()iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have overflows and underflows in CIccXmlArrayType::ParseTextCountNum(). This vulnerability affects users of the iccDEV library who process ICC color profiles. This issue is fixed in version 2.3.1.1.EPSS0.20%HighCVE-2026-21500color · iccdev +1 moreStack Overflow in iccDEV XML Calculator Macro ExpansioniccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to stack overflow in the XML calculator macro expansion. This issue has been patched in version 2.3.1.2.EPSS0.22%HighCVE-2026-21681color · iccdev +1 moreiccDEV has Undefined Behavior runtime error: nan is outside the range .. IccProfLib/IccTagBasic.cppiccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Undefined Behavior runtime error. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.EPSS0.21%HighCVE-2026-21490color · iccdev +1 moreiccDEV has heap buffer overflow in CIccTagLut16::Validate()iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. A vulnerability present in versions prior to 2.3.1.2 affects users of the iccDEV library who process ICC color profiles. It results in heap buffer overflow in `CIccTagLut16::Validate()`. Version 2.3.1.2 contains a patch. No known workarounds are available.EPSS0.22%MediumCVE-2026-21497color · iccdev +1 moreNULL Pointer Dereference in iccDEV Unknown Tag ParsericcDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via an unknown tag parser. This issue has been patched in version 2.3.1.2.EPSS0.19%MediumCVE-2026-21499color · iccdev +1 moreNULL Pointer Dereference in iccDEV XML ParsericcDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the XML parser. This issue has been patched in version 2.3.1.2.EPSS0.19%MediumCVE-2026-21674color · iccdev +1 moreiccDEV has a Memory Leak in its CIccProfileXml::ParseTag() Error PathiccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a memory leak vulnerability in its XML MPE Parsing Path (iccFromXml). This issue is fixed in version 2.3.1.1.EPSS0.19%HighCVE-2026-21489color · iccdev +1 moreiccDEV has Out-of-bounds Read and Integer Underflow (Wrap or Wraparound)iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below have Out-of-bounds Read and Integer Underflow (Wrap or Wraparound) vulnerabilities in its CIccCalculatorFunc::SequenceNeedTempReset function. This issue is fixed in version 2.3.1.2.EPSS0.14%HighCVE-2026-21505color · iccdev +1 moreiccDEV has Undefined Behavior (UB) - Invalid Enum ValueiccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV has undefined behavior due to an invalid enum value. This issue has been patched in version 2.3.1.2.EPSS0.20%MediumCVE-2026-21496color · iccdev +1 moreNULL Pointer Dereference in iccDEV Signature ParsericcDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the signature parser. This issue has been patched in version 2.3.1.2.EPSS0.19%CriticalCVE-2026-21679color · iccdev +1 moreiccDEV has heap-buffer-overflow vulnerability in CIccLocalizedUnicode::GetText()iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap-buffer-overflow in CIccLocalizedUnicode::GetText(). This issue has been patched in version 2.3.1.2.EPSS0.38%HighCVE-2026-21676color · iccdev +1 moreiccDEV has a Heap-based Buffer Overflow in its CIccMBB::Validate() functioniccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have a Heap-based Buffer Overflow in its CIccMBB::Validate function which checks tag data validity. This issue is fixed in version 2.3.1.1.EPSS0.41%HighCVE-2026-21501color · iccdev +1 moreStack Overflow in iccDEV Calculator ParsericcDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to stack overflow in the calculator parser. This issue has been patched in version 2.3.1.2.EPSS0.22%HighCVE-2026-21504color · iccdev +1 moreHeap Buffer Overflow in iccDEV ToneMap ParsericcDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap buffer overflow in the ToneMap parser. This issue has been patched in version 2.3.1.2.EPSS0.22%MediumCVE-2026-21689color · iccdev +1 moreiccDEV has Type Confusion in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cppiccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in `CIccProfileXml::ParseBasic()` at `IccXML/IccLibXML/IccProfileXml.cpp`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.EPSS0.33%HighCVE-2026-21683color · iccdev +1 moreiccDEV has Type Confusion in icStatusCMM::CIccEvalCompare::EvaluateProfile()iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in `icStatusCMM::CIccEvalCompare::EvaluateProfile()`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.EPSS0.32%HighCVE-2026-21686color · iccdev +1 moreiccDEV has Undefined Behavior in CIccTagLutAtoB::Validate()iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have Undefined Behavior in `CIccTagLutAtoB::Validate()`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.EPSS0.29%