color records
113 published records for vendor color.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 71.7%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation43
- CWE-122 Heap-based Buffer Overflow14
- CWE-125 Out-of-bounds Read11
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')7
- CWE-476 NULL Pointer Dereference6
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer5
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
113 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2026-21675No exploit | iccDEV has a Use After Free vulnerability in CIccCmm class via improper hint manager object deletioncolor · iccdev · CWE-20 | Critical9.8 | — | 0.4% | Jan 5, 2026 |
39Monitor | CVE-2026-21679No exploit | iccDEV has heap-buffer-overflow vulnerability in CIccLocalizedUnicode::GetText()color · iccdev · CWE-20 | Critical9.8 | — | 0.3% | Jan 7, 2026 |
38Monitor | CVE-2012-1616No exploit | Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers toargyllcms · argyllcms · CWE-399 | Critical9.3 | — | 4.7% | Jun 21, 2012 |
35Monitor | CVE-2026-22861No exploit | iccDEV has a heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cppcolor · iccdev · CWE-120 | High8.8 | — | 0.7% | Jan 13, 2026 |
35Monitor | CVE-2023-46602No exploit | In International Color Consortium DemoIccMAX 79ecb74, there is a stack-based buffer overflow in the icFixXml function in IccXML/IccLibXML/Iccolor · demoiccmax · CWE-787 | High8.8 | — | 0.6% | Oct 23, 2023 |
35Monitor | CVE-2026-24406No exploit | iccDEV has Heap Buffer Overflow in CIccTagNamedColor2::SetSize()color · iccdev · CWE-20 | High8.8 | — | 0.6% | Jan 23, 2026 |
35Monitor | CVE-2026-24405No exploit | iccDEV has Heap Buffer Overflow in CIccMpeCalculator::Read()color · iccdev · CWE-20 | High8.8 | — | 0.6% | Jan 23, 2026 |
35Monitor | CVE-2026-24412No exploit | iccDEV has Heap Buffer Overflow in icCurvesFromXml()color · iccdev · CWE-20 | High8.8 | — | 0.6% | Jan 23, 2026 |
35Monitor | CVE-2023-46603No exploit | In International Color Consortium DemoIccMAX 79ecb74, there is an out-of-bounds read in the CIccPRMG::GetChroma function in IccProfLib/IccPrcolor · demoiccmax · CWE-125 | High8.8 | — | 0.6% | Oct 23, 2023 |
35Monitor | CVE-2024-38427No exploit | In International Color Consortium DemoIccMAX before 85ce74e, a logic flaw in CIccTagXmlProfileSequenceId::ParseXml in IccXML/IccLibXML/IccTaCWE-252 | High8.8 | — | 0.5% | Jun 15, 2024 |
35Monitor | CVE-2026-24407No exploit | iccDEV has Undefined Behavior in icSigCalcOp()color · iccdev · CWE-20 | High8.8 | — | 0.4% | Jan 23, 2026 |
35Monitor | CVE-2026-24404No exploit | iccDEV has Null Pointer Deference and Undefined Behavior in CIccXmlArrayType()color · iccdev · CWE-20 | High8.8 | — | 0.4% | Jan 23, 2026 |
35Monitor | CVE-2026-24403No exploit | iccDEV Undefined Behavior in CIccProfile::CheckHeader() Leads to Integer Overflowcolor · iccdev · CWE-20 | High8.8 | — | 0.4% | Jan 23, 2026 |
35Monitor | CVE-2026-22255No exploit | iccDEV has heap-buffer-overflow in CIccCLUT::Init() at IccProfLib/IccTagLut.cppcolor · iccdev · CWE-20 | High8.8 | — | 0.4% | Jan 8, 2026 |
35Monitor | CVE-2026-21676No exploit | iccDEV has a Heap-based Buffer Overflow in its CIccMBB::Validate() functioncolor · iccdev · CWE-122 | High8.8 | — | 0.4% | Jan 6, 2026 |
35Monitor | CVE-2026-22047No exploit | iccDEV has heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cppcolor · iccdev · CWE-20 | High8.8 | — | 0.3% | Jan 7, 2026 |
35Monitor | CVE-2026-24409No exploit | iccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlFloatNum<>::ParseXml()color · iccdev · CWE-20 | High8.8 | — | 0.3% | Jan 23, 2026 |
35Monitor | CVE-2026-24410No exploit | iccDEV has Undefined Behavior and Null Pointer Deference in CIccProfileXml::ParseBasic()color · iccdev · CWE-20 | High8.8 | — | 0.3% | Jan 23, 2026 |
35Monitor | CVE-2026-24411No exploit | iccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlSegmentedCurve::ToXml()color · iccdev · CWE-20 | High8.8 | — | 0.3% | Jan 23, 2026 |
35Monitor | CVE-2026-21485No exploit | iccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()color · iccdev · CWE-20 | High8.8 | — | 0.3% | Jan 6, 2026 |
35Monitor | CVE-2026-21677No exploit | iccDEV has Undefined Behavior in CIccCLUT::Init()color · iccdev · CWE-20 | High8.8 | — | 0.3% | Jan 6, 2026 |
35Monitor | CVE-2026-21692No exploit | iccDEV has Type Confusion in ToXmlCurve() at IccXML/IccLibXML/IccMpeXml.cppcolor · iccdev · CWE-20 | High8.8 | — | 0.3% | Jan 7, 2026 |
35Monitor | CVE-2026-21693No exploit | iccDEV has Type Confusion in CIccSegmentedCurveXml::ToXml() at IccXML/IccLibXML/IccMpeXml.cppcolor · iccdev · CWE-20 | High8.8 | — | 0.3% | Jan 7, 2026 |
35Monitor | CVE-2026-21682No exploit | iccDEV has heap-buffer-overflow in CIccXmlArrayType::ParseText()color · iccdev · CWE-20 | High8.8 | — | 0.3% | Jan 7, 2026 |
35Monitor | CVE-2026-21688No exploit | iccDEV has Type Confusion in SIccCalcOp::ArgsPushed() at IccProfLib/IccMpeCalc.cppcolor · iccdev · CWE-20 | High8.8 | — | 0.3% | Jan 7, 2026 |
- CVE-2026-2167539Monitor
iccDEV has a Use After Free vulnerability in CIccCmm class via improper hint manager object deletion
CriticalCVSS 9.8No exploitEPSS 0%color · iccdevJan 5, 2026
- CVE-2026-2167939Monitor
iccDEV has heap-buffer-overflow vulnerability in CIccLocalizedUnicode::GetText()
CriticalCVSS 9.8No exploitEPSS 0%color · iccdevJan 7, 2026
- CVE-2012-161638Monitor
Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to
CriticalCVSS 9.3No exploitEPSS 4%argyllcms · argyllcmsJun 21, 2012
- CVE-2026-2286135Monitor
iccDEV has a heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp
HighCVSS 8.8No exploitEPSS 0%color · iccdevJan 13, 2026
- CVE-2023-4660235Monitor
In International Color Consortium DemoIccMAX 79ecb74, there is a stack-based buffer overflow in the icFixXml function in IccXML/IccLibXML/Ic
HighCVSS 8.8No exploitEPSS 0%color · demoiccmaxOct 23, 2023
- CVE-2026-2440635Monitor
iccDEV has Heap Buffer Overflow in CIccTagNamedColor2::SetSize()
HighCVSS 8.8No exploitEPSS 0%color · iccdevJan 23, 2026
- CVE-2026-2440535Monitor
iccDEV has Heap Buffer Overflow in CIccMpeCalculator::Read()
HighCVSS 8.8No exploitEPSS 0%color · iccdevJan 23, 2026
- CVE-2026-2441235Monitor
iccDEV has Heap Buffer Overflow in icCurvesFromXml()
HighCVSS 8.8No exploitEPSS 0%color · iccdevJan 23, 2026
- CVE-2023-4660335Monitor
In International Color Consortium DemoIccMAX 79ecb74, there is an out-of-bounds read in the CIccPRMG::GetChroma function in IccProfLib/IccPr
HighCVSS 8.8No exploitEPSS 0%color · demoiccmaxOct 23, 2023
- CVE-2024-3842735Monitor
In International Color Consortium DemoIccMAX before 85ce74e, a logic flaw in CIccTagXmlProfileSequenceId::ParseXml in IccXML/IccLibXML/IccTa
HighCVSS 8.8No exploitEPSS 0%Jun 15, 2024
- CVE-2026-2440735Monitor
iccDEV has Undefined Behavior in icSigCalcOp()
HighCVSS 8.8No exploitEPSS 0%color · iccdevJan 23, 2026
- CVE-2026-2440435Monitor
iccDEV has Null Pointer Deference and Undefined Behavior in CIccXmlArrayType()
HighCVSS 8.8No exploitEPSS 0%color · iccdevJan 23, 2026
- CVE-2026-2440335Monitor
iccDEV Undefined Behavior in CIccProfile::CheckHeader() Leads to Integer Overflow
HighCVSS 8.8No exploitEPSS 0%color · iccdevJan 23, 2026
- CVE-2026-2225535Monitor
iccDEV has heap-buffer-overflow in CIccCLUT::Init() at IccProfLib/IccTagLut.cpp
HighCVSS 8.8No exploitEPSS 0%color · iccdevJan 8, 2026
- CVE-2026-2167635Monitor
iccDEV has a Heap-based Buffer Overflow in its CIccMBB::Validate() function
HighCVSS 8.8No exploitEPSS 0%color · iccdevJan 6, 2026
- CVE-2026-2204735Monitor
iccDEV has heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp
HighCVSS 8.8No exploitEPSS 0%color · iccdevJan 7, 2026
- CVE-2026-2440935Monitor
iccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlFloatNum<>::ParseXml()
HighCVSS 8.8No exploitEPSS 0%color · iccdevJan 23, 2026
- CVE-2026-2441035Monitor
iccDEV has Undefined Behavior and Null Pointer Deference in CIccProfileXml::ParseBasic()
HighCVSS 8.8No exploitEPSS 0%color · iccdevJan 23, 2026
- CVE-2026-2441135Monitor
iccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlSegmentedCurve::ToXml()
HighCVSS 8.8No exploitEPSS 0%color · iccdevJan 23, 2026
- CVE-2026-2148535Monitor
iccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()
HighCVSS 8.8No exploitEPSS 0%color · iccdevJan 6, 2026
- CVE-2026-2167735Monitor
iccDEV has Undefined Behavior in CIccCLUT::Init()
HighCVSS 8.8No exploitEPSS 0%color · iccdevJan 6, 2026
- CVE-2026-2169235Monitor
iccDEV has Type Confusion in ToXmlCurve() at IccXML/IccLibXML/IccMpeXml.cpp
HighCVSS 8.8No exploitEPSS 0%color · iccdevJan 7, 2026
- CVE-2026-2169335Monitor
iccDEV has Type Confusion in CIccSegmentedCurveXml::ToXml() at IccXML/IccLibXML/IccMpeXml.cpp
HighCVSS 8.8No exploitEPSS 0%color · iccdevJan 7, 2026
- CVE-2026-2168235Monitor
iccDEV has heap-buffer-overflow in CIccXmlArrayType::ParseText()
HighCVSS 8.8No exploitEPSS 0%color · iccdevJan 7, 2026
- CVE-2026-2168835Monitor
iccDEV has Type Confusion in SIccCalcOp::ArgsPushed() at IccProfLib/IccMpeCalc.cpp
HighCVSS 8.8No exploitEPSS 0%color · iccdevJan 7, 2026