← Back

Colord Project

colord_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Colord
colord
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-42523
1Colord Project
1Colord
Nov 21, 2024
Aug 25, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing aft...Show more
There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.Show less