This CPE summary could be partial or incomplete. Please contact us for a detailed listing.


Vendor Colord Project First view 2022-08-25
Product Colord Last view 2022-08-25
Version 1.4.4 Type Application
Update *  
Edition *  
Language *  
Sofware Edition *  
Target Software *  
Target Hardware *  
Other *  
CPE Product cpe:2.3:a:colord_project:colord

Activity : Overall

Related : CVE

  Date Alert Description
7.5 2022-08-25 CVE-2021-42523

There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.

CWE : Common Weakness Enumeration

100% (1) CWE-401 Failure to Release Memory Before Removing Last Reference ('Memory L...