CNNVD-202601-1082 Information

Jan 06, 2026 cve

CNNVD ID

CNNVD-202601-1082

CVE-2026-21675

CNNVD Published: 2026-01-06

Description (Chinese)

iccDEV是International Color Consortium (ICC)开源的一个颜色配置代码库。 iccDEV 2.3.1及之前版本存在安全漏洞，该漏洞源于CIccXform::Create函数存在释放后重用，可能导致释放后重用攻击。

Description (English)

iccDEV is an open-source colour configuration code library for International Color Consortium (ICC). iccDEV 2.3.1 and previous versions have a security loophole, which stems from the re-use of the CIccXform::Create function after release, which may lead to re-attack after release.

Hazard Level

Low

Vulnerability Type

其他

Published

2026-01-06

Last Modified

2026-02-24

References

https://github.com/InternationalColorConsortium/iccDEV/commit/510baf58fa48e00ebbb5dd577f0db4af8876bb31 https://github.com/InternationalColorConsortium/iccDEV/issues/182 https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-wcwx-794g-g78f

Patch

https://github.com/InternationalColorConsortium/iccDEV/releases

Share on: