PT-2026-1405 · Iccdev · Iccdev

·

CVE-2026-21485

·

Publicado

2026-01-06

·

Atualizado

2026-01-07

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2
Description iccDEV is a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and earlier contain Undefined Behavior (UB) and Out of Memory errors. Undefined Behavior refers to situations where the behavior of a program is not specified by the programming language standard, potentially leading to unpredictable results or crashes. Out of Memory errors occur when a program attempts to allocate more memory than is available, resulting in program termination.
Recommendations Update to version 2.3.1.2 or later.

Exploit

Correção

Resource Exhaustion

Out of bounds Read

Memory Corruption

RCE

NULL Pointer Dereference

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2026-21485
GHSA-CHP2-4GV5-2432

Produtos afetados

Iccdev