Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a vulnerability IccCmm.cpp:5793 when reading through index during ICC profile processing. The malformed ICC profile triggers improper array bounds validation in the color management module, resulting in an out-of-bounds read that can lead to memory disclosure or segmentation fault from accessing memory beyond the array boundary. This issue has been patched in version 2.3.1.3.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-04 | 1 | General1 |
| 2026-02-05 | 1 | Disclosure1 |
CVE-2026-25585 Out-of-Bounds Read Vulnerability in iccDEV Color Management Library Before 2.3.1.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25585
Post summary
The note announces a new out‑of‑bounds read vulnerability in iccDEV Color Management Library (pre‑2.3.1.3) with no evidence of exploits, patches, or active use.
CVE-2026-25585 iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3,… https://www.cve.org/CVERecord?id=CVE-2026-25585
Post summary
The text merely notes that CVE‑2026‑25585 affects iccDEV libraries prior to version 2.3.1.3, without providing any PoC, exploit, patch, or technical detail.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | color | iccdev | - | - | - |