Beveiligingsadvies

CVE-2026-30978

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-10 17:46:18
Laatst bijgewerkt 2026-03-10 19:32:28
Toegewezen door GitHub_M
CVSS-score 7.8
Status PUBLISHED

Beschrijving

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-use-after-free in CIccCmm::AddXform() causing invalid vptr dereference and crash. This vulnerability is fixed in 2.3.1.5.