CVE-2026-24852

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2

Description iccDEV is a set of libraries and tools for interacting with ICC color management profiles. A heap buffer over-read can occur when the strlen() function processes a non-null-terminated buffer, potentially leaking heap memory contents and causing application termination. This affects users of the iccDEV library who process ICC color profiles. ICC Profile Injection vulnerabilities can arise when user-controllable input is incorporated into ICC profile data in an unsafe manner.

Recommendations Update to version 2.3.1.2 or later.