CNNVD-202601-963 Information

CNNVD ID

CNNVD-202601-963

CVE-2026-21492

  • CNNVD Published: 2026-01-06

Description (Chinese)

iccDEV是International Color Consortium (ICC)开源的一个颜色配置代码库。 iccDEV 2.3.1.2之前版本存在代码问题漏洞,该漏洞源于存在空指针成员调用,可能导致空指针取消引用。

Description (English)

iccDEV is an open-source colour configuration code library for International Color Consortium (ICC). Before iccDEV 2.3.1.2 there was a code problem loophole, which stemmed from the existence of an empty pointer member call, which could lead to an empty pointer being deleted.

Hazard Level

High

Vulnerability Type

代码问题

Published

2026-01-06

Last Modified

2026-02-24

References

https://github.com/InternationalColorConsortium/iccDEV/issues/394 https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-xpq3-v3jj-mgvx https://github.com/InternationalColorConsortium/iccDEV/commit/e72361d215351cbac0002466c4f936e94d6a99e7 https://github.com/InternationalColorConsortium/iccDEV/commit/b200a629ada310137d6ae5c53fc9e6d91a4b0dae https://github.com/InternationalColorConsortium/iccDEV/pull/401 https://access.redhat.com/security/cve/cve-2026-21492

Patch

https://github.com/InternationalColorConsortium/iccDEV/releases

Share on: