Color vulnerabilities
We track 3 vulnerabilities in Color products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 16, 2024.
3vulnerabilities
0critical
3high
0exploited
8.8average CVSS score
Latest Color vulnerabilities
- 8.8 High severity
demoiccmax: Unchecked Return Value
In International Color Consortium DemoIccMAX before 85ce74e, a logic flaw in CIccTagXmlProfileSequenceId::ParseXml in IccXML/IccLibXML/IccTagXml.cpp results in unconditionally returning false.
- 8.8 High severity
Demoiccmax: Out-of-bounds Read
In International Color Consortium DemoIccMAX 79ecb74, there is an out-of-bounds read in the CIccPRMG::GetChroma function in IccProfLib/IccPrmg.cpp in libSampleICC.a.
- 8.8 High severity
Demoiccmax: Out-of-bounds Write
In International Color Consortium DemoIccMAX 79ecb74, there is a stack-based buffer overflow in the icFixXml function in IccXML/IccLibXML/IccUtilXml.cpp in libIccXML.a.