PatchTheCVE: iccdev

CVE-2026-31797: iccDEV provides a set of libraries and tools for working with ICC color management profiles

Wed, 17 Jun 2026 10:34:28 +0000

MEDIUM 6.1: iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CTiffImg::ReadLine() when iccApplyProfiles processes a crafted TIFF image, causing memory disclosure or crash. This vulnerability is fixed in 2.3.1.5.

CVE-2026-31796: iccDEV provides a set of libraries and tools for working with ICC color management profiles

Wed, 17 Jun 2026 10:34:28 +0000

HIGH 7.8: iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow in icCurvesFromXml() causing heap memory corruption or crash. This vulnerability is fixed in 2.3.1.5.

CVE-2026-31795: iccDEV provides a set of libraries and tools for working with ICC color management profiles

Wed, 17 Jun 2026 10:34:28 +0000

HIGH 7.8: iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow write in CIccXform3DLut::Apply() corrupting stack memory or crash. This vulnerability is fixed in 2.3.1.5.

CVE-2026-31794: iccDEV provides a set of libraries and tools for working with ICC color management profiles

Wed, 17 Jun 2026 10:34:28 +0000

MEDIUM 5.5: iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a segmentation fault from invalid/wild pointer read in CIccCLUT::Interp3d() causing a denial of service. This vulnerability is fixed in 2.3.1.5.

CVE-2026-31793: iccDEV provides a set of libraries and tools for working with ICC color management profiles

Wed, 17 Jun 2026 10:34:28 +0000

MEDIUM 5.5: iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a segmentation fault due to invalid/wild pointer read in CIccCalculatorFunc::ApplySequence() causing denial of service. This vulnerability is fixed in 2.3.1.5.

CVE-2026-31792: iccDEV provides a set of libraries and tools for working with ICC color management profiles

Wed, 17 Jun 2026 10:34:28 +0000

HIGH 7.8: iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a null pointer dereference in CIccTagXmlStruct::ParseTag() causing a segmentation fault or denial of service. This vulnerability is fixed in 2.3.1.5.

CVE-2026-30987: iccDEV provides a set of libraries and tools for working with ICC color management profiles

Wed, 17 Jun 2026 10:33:16 +0000

HIGH 7.8: iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in CIccTagNum<>::GetValues() causing stack memory corruption or crash. This vulnerability is fixed in 2.3.1.5.

CVE-2026-30986: iccDEV provides a set of libraries and tools for working with ICC color management profiles

Wed, 17 Jun 2026 10:33:16 +0000

MEDIUM 5.5: iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow write in CIccMatrixMath::SetRange() causing memory corruption or crash. This vulnerability is fixed in 2.3.1.5.

CVE-2026-30985: iccDEV provides a set of libraries and tools for working with ICC color management profiles

Wed, 17 Jun 2026 10:33:16 +0000

HIGH 7.8: iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow write in CIccMatrixMath::SetRange() causing memory corruption or crash. This vulnerability is fixed in 2.3.1.5.

CVE-2026-30984: iccDEV provides a set of libraries and tools for working with ICC color management profiles

Wed, 17 Jun 2026 10:33:16 +0000

MEDIUM 6.1: iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CIccCalculatorFunc::ApplySequence() causing an application crash. This vulnerability is fixed in 2.3.1.5.

CVE-2026-30983: iccDEV provides a set of libraries and tools for working with ICC color management profiles

Wed, 17 Jun 2026 10:33:16 +0000

HIGH 7.8: iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in icFixXml() (strcpy) causing stack memory corruption or crash. This vulnerability is fixed in 2.3.1.5.

CVE-2026-30982: iccDEV provides a set of libraries and tools for working with ICC color management profiles

Wed, 17 Jun 2026 10:33:16 +0000

MEDIUM 6.1: iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CIccPcsXform::pushXYZConvert() causing crash and potentially leaking memory contents. This vulnerability is fixed in 2.3.1.5.

CVE-2026-30981: iccDEV provides a set of libraries and tools for working with ICC color management profiles

Wed, 17 Jun 2026 10:33:15 +0000

MEDIUM 6.1: iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-buffer-overflow read in CIccXmlArrayType<>::DumpArray() causing out-of-bounds read and/or crash. This vulnerability is fixed in 2.3.1.5.

CVE-2026-30980: iccDEV provides a set of libraries and tools for working with ICC color management profiles

Wed, 17 Jun 2026 10:33:15 +0000

MEDIUM 5.5: iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack overflow in CIccBasicStructFactory::CreateStruct() causing uncontrolled recursion/stack exhaustion and crash. This vulnerability is fixed in 2.3.1.5.

CVE-2026-30979: iccDEV provides a set of libraries and tools for working with ICC color management profiles

Wed, 17 Jun 2026 10:33:15 +0000

HIGH 7.8: iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow in CIccCalculatorFunc::InitSelectOp() triggered with local user interaction causing memory corruption/crash. This vulnerability is fixed in 2.3.1.5.

CVE-2026-30978: iccDEV provides a set of libraries and tools for working with ICC color management profiles

Wed, 17 Jun 2026 10:33:15 +0000

HIGH 7.8: iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-use-after-free in CIccCmm::AddXform() causing invalid vptr dereference and crash. This vulnerability is fixed in 2.3.1.5.

CVE-2026-27692: iccDEV provides a set of libraries and tools for working with ICC color management profiles

Wed, 17 Jun 2026 10:27:31 +0000

HIGH 7.1: iccDEV provides a set of libraries and tools for working with ICC color management profiles. In versions up to and including 2.3.1.4, heap-buffer-overflow read occurs during CIccTagTextDescription::Release() when strlen() reads past a heap buffer while parsing ICC profile XML text description tags,

CVE-2026-27691: iccDEV provides a set of libraries and tools for working with ICC color management profiles

Wed, 17 Jun 2026 10:27:31 +0000

MEDIUM 6.2: iccDEV provides a set of libraries and tools for working with ICC color management profiles. In versions up to and including 2.3.1.4, signed integer overflow in iccFromCube.cpp during multiplication triggers undefined behavior, potentially causing crashes or incorrect ICC profile generation when pro

CVE-2026-25634: iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of

Wed, 17 Jun 2026 10:24:59 +0000

HIGH 7.8: iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to 2.3.1.4, SrcPixel and DestPixel stack buffers overlap in CIccTagMultiProcessElement::Apply() int IccTagMPE.cpp. This vulnerability is fixed in 2.3.1.4

CVE-2026-25585: iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of

Wed, 17 Jun 2026 10:24:54 +0000

HIGH 7.8: iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a vulnerability IccCmm.cpp:5793 when reading through index during ICC profile processing. The malformed ICC profile triggers

CVE-2026-25584: iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of

Wed, 17 Jun 2026 10:24:54 +0000

HIGH 7.8: iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a stack-buffer-overflow vulnerability in CIccTagFloatNum<>::GetValues(). This is triggered when processing a malformed ICC p

CVE-2026-25583: iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of

Wed, 17 Jun 2026 10:24:54 +0000

HIGH 7.8: iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow vulnerability in CIccFileIO::Read8() when processing malformed ICC profile files via unchecked fread

CVE-2026-25582: iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of

Wed, 17 Jun 2026 10:24:53 +0000

HIGH 7.8: iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow (read) vulnerability in CIccIO::WriteUInt16Float() when converting malformed XML to ICC profiles via

CVE-2026-25503: iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of

Wed, 17 Jun 2026 10:24:45 +0000

HIGH 7.1: iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, type confusion allowed malformed ICC profiles to trigger undefined behavior when loading invalid icImageEncodingType values causing d

CVE-2026-25502: iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of

Wed, 17 Jun 2026 10:24:45 +0000

HIGH 7.8: iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, stack-based buffer overflow in icFixXml() function when processing malformed ICC profiles, allows potential arbitrary code execution

CVE-2026-24856: iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of

Wed, 17 Jun 2026 10:23:42 +0000

HIGH 7.8: iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Versions prior to 2.3.1.2 have an undefined behavior issue when floating-point NaN values are converted to unsigned short integer types during ICC profile XML

CVE-2026-24852: iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of

Wed, 17 Jun 2026 10:23:42 +0000

MEDIUM 6.1: iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, a heap buffer over-read when the strlen() function attempts to read a non-null-terminated buffer potentially leaking heap memory cont

CVE-2026-24412: iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management prof