This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-21485 | BDVDB-2026-309355 Detail

InternationalColorConsortiumiccDEV

Description#

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are prone to have Undefined Behavior (UB) and Out of Memory errors. This issue is fixed in version 2.3.1.2.

Impact#

Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.

Weaknesses#

  • CWE-20 Improper Input Validation
  • CWE-125 Out-of-bounds Read
  • CWE-190 Integer Overflow or Wraparound
  • CWE-400 Uncontrolled Resource Consumption
  • CWE-476 NULL Pointer Dereference
  • CWE-787 Out-of-bounds Write
  • CWE-1284 Improper Validation of Specified Quantity in Input

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.