Description


iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to Null pointer dereference in CIccProfileXml::ParseBasic(), leading to denial of service. This issue has been patched in version 2.3.1.2.

Related CPE's


Vulnerable

Weaknesses



CWE-20CWE-476


CWE-476

CVSS impact metrics


CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

5.5 · Medium

Information


Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2026-01-07T18:15:54.850Z

6 days ago

Last modified

2026-01-13T21:00:53.463Z

2 hours ago