CNNVD-202601-1177 Information

CNNVD ID

CNNVD-202601-1177

CVE-2026-21497

  • CNNVD Published: 2026-01-07

Description (Chinese)

iccDEV是International Color Consortium开源的一个颜色配置代码库。 iccDEV 2.3.1.2之前版本存在代码问题漏洞,该漏洞源于未知标签解析器存在空指针取消引用。

Description (English)

iccDEV is a colour configuration code library of the International Color Consortium open source. iccDEV 2.3.1.2 has a code problem loophole, which stems from the absence of an empty pointer to remove the reference.

Hazard Level

High

Vulnerability Type

代码问题

Affected Vendor

International Color Consortium

Published

2026-01-07

Last Modified

2026-02-24

References

https://github.com/InternationalColorConsortium/iccDEV/commit/9419cac7f084197941994b8b9d17def204008385 https://github.com/InternationalColorConsortium/iccDEV/issues/374 https://github.com/InternationalColorConsortium/iccDEV/pull/403 https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-7gv7-cmrv-4j85

Patch

https://github.com/InternationalColorConsortium/iccDEV/releases

Share on: