PT-2026-2146 · Iccdev · Iccdev
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
iccDEV versions prior to 2.3.1.2
Description
iccDEV is a set of libraries and tools for interacting with International Color Consortium (ICC) color management profiles. A heap-buffer-overflow vulnerability exists in the
SIccCalcOp::Describe() function located at IccProfLib/IccMpeCalc.cpp. This issue affects users who process ICC color profiles.Recommendations
Update to iccDEV version 2.3.1.2 to resolve this vulnerability.
Exploit
Fix
Unchecked Return Value
Memory Corruption
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Iccdev