Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Colord Project Subscribe
Filtered by product Colord
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-42523 1 Colord Project 1 Colord 2022-08-31 N/A 7.5 HIGH
There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.