PT-2026-2072 · Iccdev · Iccdev

·

CVE-2026-21506

·

Publicado

2026-01-07

·

Atualizado

2026-01-08

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2
Description iccDEV is a set of libraries and tools used for interacting with, manipulating, and applying ICC color management profiles. A null pointer dereference issue exists in the CIccProfileXml::ParseBasic() function, which can lead to a denial of service.
Recommendations Update to iccDEV version 2.3.1.2 or later.

Exploit

Correção

DoS

RCE

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2026-21506
GHSA-WFM7-M548-X4VP

Produtos afetados

Iccdev