PT-2026-2069 · Iccdev · Iccdev
CVSS v3.1
6.1
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H |
Name of the Vulnerable Software and Affected Versions
iccDEV versions prior to 2.3.1.2
Description
iccDEV is a set of libraries and tools used for interacting with, manipulating, and applying ICC color management profiles. Versions prior to 2.3.1.2 exhibit undefined behavior due to a null pointer being passed to the
memcpy() function within the CIccTagSparseMatrixArray component.Recommendations
Update to iccDEV version 2.3.1.2 or later.
Exploit
Correção
NULL Pointer Dereference
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Iccdev