CNNVD-202601-1071 Information
CNNVD ID
CNNVD-202601-1071
Related CVE
- CNNVD Published: 2026-01-06
Description (Chinese)
iccDEV是International Color Consortium (ICC)开源的一个颜色配置代码库。 iccDEV 2.3.1.1及之前版本存在缓冲区错误漏洞，该漏洞源于CIccSparseMatrix::CIccSparseMatrix函数存在释放后重用、基于堆的缓冲区溢出以及整数溢出或环绕错误和越界写入。
Description (English)
iccDEV is an open-source colour configuration code library for International Color Consortium (ICC). iccDEV 2.3.1.1 and previous versions contain an error loophole in the buffer zone, derived from the CIccSparseMatrix::CIccSparseMatrix function having post-release reuse, pile-based buffer zone spills, and integer spills or circular errors and cross-border writing.
Hazard Level
High
Vulnerability Type
缓冲区错误
Published
2026-01-06
Last Modified
2026-02-24
References
https://github.com/InternationalColorConsortium/iccDEV/commit/1ab7363f38a20089934d3410c88f714eea392bf5 https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-mg98-j5q2-674w
Patch
https://github.com/InternationalColorConsortium/iccDEV/releases
Share on: