CNNVD-202601-1167 Information
CNNVD ID
CNNVD-202601-1167
Related CVE
- CNNVD Published: 2026-01-07
Description (Chinese)
iccDEV是International Color Consortium开源的一个颜色配置代码库。 iccDEV 2.3.1.2之前版本存在代码问题漏洞，该漏洞源于CIccProfileXml::ParseBasic()中存在空指针取消引用，可能导致拒绝服务。
Description (English)
iccDEV is a colour configuration code library of the International Color Consortium open source. There was a code problem gap in the previous version of iccDEV 2.3.1.2, which stemmed from the existence of an empty pointer to cancel the reference in ciccProfileXml::ParseBasic() that could lead to the denial of services.
Hazard Level
High
Vulnerability Type
代码问题
Affected Vendor
International Color Consortium
Published
2026-01-07
Last Modified
2026-02-24
References
https://github.com/InternationalColorConsortium/iccDEV/commit/f2ea32372ad3ebbd29147940229cb9c5548fe033 https://github.com/InternationalColorConsortium/iccDEV/issues/371 https://github.com/InternationalColorConsortium/iccDEV/pull/418 https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-wfm7-m548-x4vp
Patch
https://github.com/InternationalColorConsortium/iccDEV/releases
Share on: