Description (CNA)
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV has undefined behavior due to an invalid enum value. This issue has been patched in version 2.3.1.2.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| InternationalColorConsortium / iccDEV | affected < 2.3.1.2 |
CWE
CWE-20, CWE-843
References
- https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-j577-8285-qrf9
- https://github.com/InternationalColorConsortium/iccDEV/issues/361
- https://github.com/InternationalColorConsortium/iccDEV/pull/419
- https://github.com/InternationalColorConsortium/iccDEV/commit/3bbe2088b2796cf0aa4f7fa19f7ccd9ad1c7aba5
- https://github.com/InternationalColorConsortium/iccDEV/commit/b1bb72fc3e9442ee1355aabae7314bb7d3fc9d41
ADP enrichment
No English description supplied.