Calibre ICE vulnerabilities

3 known vulnerabilities in Calibre ICE from Siemens. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Google Brotli Unchecked Return Value Exploited

  CVE-2026-111497Oct 22, 2026GoogleEPSS 82.6%

  A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a

• 7.5 High severity

  OpenSSL: Buffer Copy without Checking Size of Input

  CVE-2022-3786Nov 1, 2022OpenSSLEPSS 92.5%

  A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an applic

• 7.5 High severity

  OpenSSL: Out-of-bounds Write

  CVE-2022-3602Nov 1, 2022OpenSSLEPSS 90.8%

  A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the app