CNNVD-202601-1179 Information

CNNVD ID

CNNVD-202601-1179

CVE-2026-21496

  • CNNVD Published: 2026-01-07

Description (Chinese)

iccDEV是International Color Consortium (ICC)开源的一个颜色配置代码库。 iccDEV 2.3.1.2之前版本存在安全漏洞,该漏洞源于签名解析器存在空指针取消引用。

Description (English)

iccDEV is an open-source colour configuration code library for International Color Consortium (ICC). The previous version of iccDEV 2.3.1.2 had a security loophole, which stemmed from the existence of an empty pointer to cancel the reference.

Hazard Level

High

Vulnerability Type

其他

Published

2026-01-07

Last Modified

2026-02-24

References

https://github.com/InternationalColorConsortium/iccDEV/commit/0e51ceb427925b7e22f0465547df7506d35cda1c https://github.com/InternationalColorConsortium/iccDEV/commit/b5ad23aceece3789bdf1c47bae1ecf9d7bfcd26d https://github.com/InternationalColorConsortium/iccDEV/issues/381 https://github.com/InternationalColorConsortium/iccDEV/pull/405 https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-wj8m-6w77-r4rw

Patch

https://github.com/InternationalColorConsortium/iccDEV/releases

Share on: