PT-2026-6327

CVE-2026-25582

Published

2026-02-04

Updated

2026-02-18

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.3

Description iccDEV is a set of libraries and tools for interacting with ICC color management profiles. A heap buffer overflow (read) exists in the CIccIO::WriteUInt16Float() function when converting malformed XML to ICC profiles using the iccFromXml tool.

Recommendations Update to version 2.3.1.3 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-787: Out-of-bounds Write

CWE-122: Heap-based Buffer Overflow