Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2021-42523
Description:There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.
Test IDs: 1.3.6.1.4.1.25623.1.1.4.2022.3496.1   1.3.6.1.4.1.25623.1.1.2.2023.2407   1.3.6.1.4.1.25623.1.1.2.2023.1747   1.3.6.1.4.1.25623.1.1.2.2023.2498   1.3.6.1.4.1.25623.1.1.2.2022.2676   1.3.6.1.4.1.25623.1.1.2.2023.2186   1.3.6.1.4.1.25623.1.1.2.2023.1493   1.3.6.1.4.1.25623.1.1.4.2022.4410.1   1.3.6.1.4.1.25623.1.1.10.2022.0366   1.3.6.1.4.1.25623.1.1.2.2023.1492   1.3.6.1.4.1.25623.1.0.822634   1.3.6.1.4.1.25623.1.1.4.2022.4170.1   1.3.6.1.4.1.25623.1.1.2.2022.2644  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2021-42523
https://github.com/hughsie/colord/issues/110
https://github.com/hughsie/colord/issues/110




© 1998-2025 E-Soft Inc. All rights reserved.