iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have Undefined Behavior in CIccTagXmlSegmentedCurve::ToXml(). This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and Code Execution. This issue has been fixed in version 2.3.1.2.
iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have Undefined Behavior and Null Pointer Deference in CIccProfileXml::ParseBasic(). This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and Code Execution. This issue has been fixed in version 2.3.1.2.
iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have Undefined Behavior and Null Pointer Deference in CIccTagXmlFloatNum<>::ParseXml(). This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and Code Execution. This issue has been fixed in version 2.3.1.2.
iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have Undefined Behavior in icSigCalcOp(). This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and Code Execution. This issue has been fixed in version 2.3.1.2.
iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have a Heap Buffer Overflow vulnerability in CIccTagNamedColor2::SetSize(). This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and Code Execution. This issue has been fixed in version 2.3.1.2.
iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have a Heap Buffer Overflow vulnerability in CIccMpeCalculator::Read(). This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and Code Execution. This issue has been fixed in version 2.3.1.2.
iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. In versions 2.3.1.1 and below, CIccXmlArrayType() contains a Null Pointer Dereference and Undefined Behavior vulnerability. This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and Code Execution. This issue has been fixed in version 2.3.1.2.
iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. In versions 2.3.1.1 and below, an integer overflow vulnerability exists in icValidateStatus CIccProfile::CheckHeader() when user-controllable input is incorporated into profile data unsafely. Tampering with tag tables, offsets, or size fields can trigger parsing errors, memory corruption, or DoS, potentially enabling arbitrary Code Execution or bypassing application logic. This issue has been fixed in version 2.3.1.2.
CVE-2026-22861 is a high-severity heap-based buffer overflow vulnerability in the iccDEV library versions prior to 2.3.1.2, specifically in the SIccCalcOp::Describe() function within IccProfLib/IccMpeCalc.cpp. This vulnerability arises from unchecked return values leading to improper memory handling when processing ICC color profiles. Exploitation requires no privileges but does require user interaction, such as opening a crafted ICC profile. Successful exploitation can result in full confidentiality, integrity, and availability compromise, including potential remote code execution. The vulnerability affects any software or systems that utilize vulnerable versions of iccDEV for ICC profile processing. Although no known exploits are currently in the wild, the high CVSS score (8.
CVE-2025-25249 is a heap-based buffer overflow vulnerability affecting multiple versions of Fortinet FortiSwitchManager and FortiOS. This flaw allows an attacker to execute unauthorized code or commands by sending specially crafted packets. The vulnerability impacts FortiSwitchManager versions 7.2.0 through 7.2.6 and FortiOS versions 6.4 (all versions), 7.0.0 through 7.0.17, 7.2.0 through 7.2.11, 7.4.0 through 7.4.8, and 7.6.0 through 7.6.3. The CVSS v3.1 base score is 7.4, indicating a high severity. Known exploits exist in the wild. Currently, only workarounds are available as remediation, with no official patch released yet.
CVE-2025-47855 is a critical improper access control vulnerability in Fortinet FortiFone versions 7.0.0 through 7.0.1 and 3.0.13 through 3.0.23. It allows unauthenticated attackers to retrieve sensitive device configuration data by sending specially crafted HTTP or HTTPS requests.
CVE-2025-67685 is a Server-Side Request Forgery (SSRF) vulnerability affecting multiple versions of Fortinet FortiSandbox (4.0.x through 5.0.4). It allows an authenticated attacker to send crafted HTTP requests that proxy internal requests to plaintext endpoints. The vulnerability requires authentication and does not allow arbitrary internal request types, limiting its impact. The CVSS score is low (3.4) due to limited confidentiality and integrity impact, no availability impact, and the need for high privileges. No known exploits are reported in the wild.
CVE-2025-58693 is a path traversal vulnerability in Fortinet FortiVoice versions 7.0.0 through 7.0.7 and 7.2.0 through 7.2.2. It allows a privileged attacker to delete files on the underlying filesystem by sending crafted HTTP or HTTPS requests.
CVE-2025-59922 is a medium-severity SQL Injection vulnerability affecting multiple versions of Fortinet FortiClientEMS. It allows an authenticated attacker with at least read-only admin permissions to execute unauthorized SQL commands via crafted HTTP/HTTPS requests. Exploitation can lead to full compromise of confidentiality, integrity, and availability of the affected system. No user interaction is required, but authentication with elevated privileges is necessary. There are no known exploits in the wild yet, and no patches have been linked at the time of publication. European organizations using FortiClientEMS for endpoint management are at risk, especially in countries with high Fortinet market penetration. Mitigation requires strict access control, monitoring for unusual SQL activity, and prompt application of vendor patches once available. The vulnerability’s CVSS score is 6.8, reflecting significant impact but requiring authenticated access. Countries like Germany, France, the UK, and the Netherlands are likely most affected due to their extensive use of Fortinet products and critical infrastructure reliance on endpoint security management.
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through 6.7.10 may allow an attacker to execute unauthorized code or commands via crafted TCP requests.
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a heap-buffer-overflow vulnerability in `CIccCLUT::Init()` at `IccProfLib/IccTagLut.cpp`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a heap-buffer-overflow vulnerability in `SIccCalcOp::Describe()` at `IccProfLib/IccMpeCalc.cpp`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a heap-buffer-overflow vulnerability in `CIccProfileXml::ParseBasic()` at `IccXML/IccLibXML/IccProfileXml.cpp`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in `CIccSegmentedCurveXml::ToXml()` at `IccXML/IccLibXML/IccMpeXml.cpp`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in `ToXmlCurve()` at `IccXML/IccLibXML/IccMpeXml.cpp`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.
