CNNVD-202602-539 Information
CNNVD ID
CNNVD-202602-539
Related CVE
- CNNVD Published: 2026-02-04
Description (Chinese)
iccDEV是International Color Consortium开源的一个颜色配置代码库。 iccDEV 2.3.1.3之前版本存在缓冲区错误漏洞，该漏洞源于CIccIO::WriteUInt16Float函数存在堆缓冲区溢出，可能导致处理畸形XML文件时越界读取。
Description (English)
iccDEV is a colour configuration code library of the International Color Consortium open source. The previous version of iccDEV 2.3.1.3 had an error loophole in the buffer zone, which originated from the CiccIO:WriteUInt16Float function, which had spills over the buffer zone, which could result in cross-border reading when processing abnormal XML files.
Hazard Level
High
Vulnerability Type
缓冲区错误
Affected Vendor
International Color Consortium
Published
2026-02-04
Last Modified
2026-02-24
References
https://github.com/InternationalColorConsortium/iccDEV/commit/b5e5dd238f609ec1a4efb25674e7fa4bd29d894a https://github.com/InternationalColorConsortium/iccDEV/issues/559 https://github.com/InternationalColorConsortium/iccDEV/pull/561 https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-46hq-fphp-jggf
Patch
https://github.com/InternationalColorConsortium/iccDEV/releases
Share on: