← Back

Color

color

112 CVEs • 3 products

Products (3)

Click to collapse
Toggle
Iccdev
iccdev
104 CVEs
Demoiccmax
demoiccmax
6 CVEs
Icclib
icclib
2 CVEs

CVEs (112)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-21675
1Color
1Iccdev
Jun 17, 2026
Jan 6, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a Use After Free vulnerability in the CIccXform::Create() function, where it deletes the hint....Show more
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a Use After Free vulnerability in the CIccXform::Create() function, where it deletes the hint. This issue is fixed in version 2.3.1.1.Show less
CVE-2026-21674
1Color
1Iccdev
Jun 17, 2026
Jan 6, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a memory leak vulnerability in its XML MPE Parsing Path (iccFromXml). This issue is fixed in v...Show more
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a memory leak vulnerability in its XML MPE Parsing Path (iccFromXml). This issue is fixed in version 2.3.1.1.Show less
CVE-2026-21673
1Color
1Iccdev
Jun 17, 2026
Jan 6, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have overflows and underflows in CIccXmlArrayType::ParseTextCountNum(). This vulnerability affects us...Show more
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have overflows and underflows in CIccXmlArrayType::ParseTextCountNum(). This vulnerability affects users of the iccDEV library who process ICC color profiles. This issue is fixed in version 2.3.1.1.Show less
CVE-2026-21507
1Color
1Iccdev
Jun 17, 2026
Jan 6, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have an infinite loop in the IccProfile.cpp function, CalcProfileID. This issue is fixed in version 2....Show more
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have an infinite loop in the IccProfile.cpp function, CalcProfileID. This issue is fixed in version 2.3.1.1.Show less
CVE-2023-48736
1Color
1Demoiccmax
Jun 17, 2026
Nov 18, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In International Color Consortium DemoIccMAX 3e7948b, CIccCLUT::Interp2d in IccTagLut.cpp in libSampleICC.a has an out-of-bounds read.
CVE-2023-47249
1Color
1Demoiccmax
Jun 17, 2026
Nov 5, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In International Color Consortium DemoIccMAX 79ecb74, a CIccXmlArrayType:::ParseText function (for unsigned short) in IccUtilXml.cpp in libIccXML.a has an out-of-bounds read.
CVE-2023-46867
1Color
1Demoiccmax
Jun 17, 2026
Oct 30, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In International Color Consortium DemoIccMAX 79ecb74, CIccXformMatrixTRC::GetCurve in IccCmm.cpp in libSampleICC.a has a NULL pointer dereference.
CVE-2023-46866
1Color
1Demoiccmax
Jun 17, 2026
Oct 30, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In International Color Consortium DemoIccMAX 79ecb74, CIccCLUT::Interp3d in IccProfLib/IccTagLut.cpp in libSampleICC.a attempts to access array elements at out-of-bounds indexes.
CVE-2023-46603
1Color
1Demoiccmax
Jun 17, 2026
Oct 23, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
In International Color Consortium DemoIccMAX 79ecb74, there is an out-of-bounds read in the CIccPRMG::GetChroma function in IccProfLib/IccPrmg.cpp in libSampleICC.a.
CVE-2023-46602
1Color
1Demoiccmax
Jun 17, 2026
Oct 23, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
In International Color Consortium DemoIccMAX 79ecb74, there is a stack-based buffer overflow in the icFixXml function in IccXML/IccLibXML/IccUtilXml.cpp in libIccXML.a.
CVE-2012-4405
3Argyllcms
ColorGhostscript
3Cms
GhostscriptIcclib
Apr 29, 2026
Sep 18, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Multiple integer underflows in the icmLut_allocate function in International Color Consortium (ICC) Format library (icclib), as used in Ghostscript 9.06 and Argyll Color Management System, allow remote attackers to cause...Show more
Multiple integer underflows in the icmLut_allocate function in International Color Consortium (ICC) Format library (icclib), as used in Ghostscript 9.06 and Argyll Color Management System, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) PostScript or (2) PDF file with embedded images, which triggers a heap-based buffer overflow. NOTE: this issue is also described as an array index error.Show less
CVE-2012-1616
2Argyllcms
Color
2Argyllcms
Icclib
Apr 29, 2026
Jun 21, 2012
N/A· v4
N/A· v3
9.3 HIGH· v2
Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC p...Show more
Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file.Show less