CNNVD-202601-1072 Information

CNNVD ID

CNNVD-202601-1072

CVE-2026-21485

  • CNNVD Published: 2026-01-06

Description (Chinese)

iccDEV是International Color Consortium (ICC)开源的一个颜色配置代码库。 iccDEV 2.3.1.1及之前版本存在安全漏洞,该漏洞源于未定义行为和内存不足错误。

Description (English)

iccDEV is an open-source colour configuration code library for International Color Consortium (ICC). There is a security loophole in the iccDEV 2.3.1.1 and earlier versions, resulting from undefined behaviour and memory deficiencies.

Hazard Level

Medium

Vulnerability Type

其他

Published

2026-01-06

Last Modified

2026-02-24

References

https://github.com/InternationalColorConsortium/iccDEV/commit/c136aac51d25cbb4d9db63f071edad4f088843df https://github.com/InternationalColorConsortium/iccDEV/issues/340 https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-chp2-4gv5-2432

Patch

https://github.com/InternationalColorConsortium/iccDEV/releases

Share on: