CNNVD-202601-1178 Information

CNNVD ID

CNNVD-202601-1178

CVE-2026-21495

  • CNNVD Published: 2026-01-07

Description (Chinese)

iccDEV是International Color Consortium (ICC)开源的一个颜色配置代码库。 iccDEV 2.3.1.2之前版本存在数字错误漏洞,该漏洞源于TIFF Image Reader中存在除零错误。

Description (English)

iccDEV is an open-source colour configuration code library for International Color Consortium (ICC). iccDEV 2.3.1.2 has a digital error loophole, which stems from a zero-exception error in TIFF Image Reader.

Hazard Level

High

Vulnerability Type

数字错误

Published

2026-01-07

Last Modified

2026-02-24

References

https://github.com/InternationalColorConsortium/iccDEV/commit/10c34179a0332a869c2b46e305a9cd23a6311dfe https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-xhrm-79rg-5784

Patch

https://github.com/InternationalColorConsortium/iccDEV/releases

Share on: