PT-2026-1433 · Iccdev · Iccdev

·

CVE-2026-21489

·

Publicado

2026-01-06

·

Atualizado

2026-01-06

CVSS v3.1

7.1

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions iccDEV versions 2.3.1.1 and below
Description iccDEV is a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below contain Out-of-bounds Read and Integer Underflow vulnerabilities within the CIccCalculatorFunc::SequenceNeedTempReset function.
Recommendations Update to version 2.3.1.2 or later.

Exploit

Correção

Out of bounds Read

Integer Underflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2026-21489
GHSA-PH89-6Q5H-WFW5

Produtos afetados

Iccdev