Lucene search

K
cveMitreCVE-2023-46867
HistoryOct 30, 2023 - 3:15 a.m.

CVE-2023-46867

2023-10-3003:15:07
CWE-476
mitre
web.nvd.nist.gov
27
cve-2023-46867
international color consortium
demoiccmax
libsampleicc.a
null pointer dereference
nvd

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

21.7%

In International Color Consortium DemoIccMAX 79ecb74, CIccXformMatrixTRC::GetCurve in IccCmm.cpp in libSampleICC.a has a NULL pointer dereference.

Affected configurations

Nvd
Node
colordemoiccmaxMatch2022-06-21
VendorProductVersionCPE
colordemoiccmax2022-06-21cpe:2.3:a:color:demoiccmax:2022-06-21:*:*:*:*:*:*:*

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

21.7%

Related for CVE-2023-46867