iccDEV Library Crashes or Corrupts Data Due to Memory Error

Summary

The iccDEV library has a memory-related bug. This bug can cause the library to crash or corrupt data. The fix is available in version 2.3.1.5, so update to that version to fix the issue.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
color	iccdev	<= 2.3.1.5	–

Original title

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow write in CIccMatrixMath::SetRange() causing memo...

Original description

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow write in CIccMatrixMath::SetRange() causing memory corruption or crash. This vulnerability is fixed in 2.3.1.5.

nvd CVSS3.1 5.5

Vulnerability type

CWE-125 Out-of-bounds Read

CWE-476 NULL Pointer Dereference