Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow vulnerability in CIccFileIO::Read8() when processing malformed ICC profile files via unchecked fread operation. This issue has been patched in version 2.3.1.3.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-04 | 1 | General1 |
| 2026-02-05 | 1 | Disclosure1 |
CVE-2026-25583 Heap Buffer Overflow in iccDEV Library Prior to Version 2.3.1.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25583
Post summary
The statement announces a heap buffer overflow vulnerability in iccDEV Library (pre‑2.3.1.3) without detailing PoC, exploits, patches, or active use.
CVE-2026-25583 iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3,… https://www.cve.org/CVERecord?id=CVE-2026-25583
Post summary
The text briefly references CVE‑2026‑25583 related to iccDEV libraries for ICC color management but provides no substantive details or actionable information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | color | iccdev | - | - | - |