Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow (read) vulnerability in CIccIO::WriteUInt16Float() when converting malformed XML to ICC profiles via iccFromXml tool. This issue has been patched in version 2.3.1.3.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-25582 iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3,… https://www.cve.org/CVERecord?id=CVE-2026-25582
Post summary
The text briefly announces CVE‑2026‑25582, noting that it involves iccDEV libraries for ICC profile handling and references a specific software version.
CVE-2026-25582 Heap Buffer Overflow in iccDEV XML to ICC Profile Conversion Before 2.3.1.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25582
Post summary
A new heap buffer overflow vulnerability (CVE-2026-25582) affecting iccDEV XML to ICC Profile Conversion before version 2.3.1.3 has been disclosed, with no PoC, exploit code, or patch information provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | color | iccdev | - | - | - |