CVE-2026-22046
High · 8.8CVSS
8.8
EPSS
0.3%
Published
Jan 7, 2026
CISA due date
—
The record
iccDEV has heap-buffer-overflow in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cpp
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-15418 In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged… CWE-130
- CVE-2026-5706 In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger… CWE-130
- CVE-2026-71402 An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. CWE-130
- CVE-2026-81575 If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts… CWE-130
- CVE-2026-58097 mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation… CWE-130
- CVE-2026-58096 LcpDecodeConfig() did not validate the length of received endpoint discriminator options… CWE-130
- CVE-2026-14587 Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way… CWE-130
- CVE-2026-67292 FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability in the gateway… CWE-130