CVE-2026-30987Disclosure(color / iccdev)

LOWCVSS 7.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in CIccTagNum<>::GetValues() causing stack memory corruption or crash. This vulnerability is fixed in 2.3.1.5.

color CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

Other references

Weakness type (CWE)

CWE-120CWE-121CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

iccdev

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked at 2 mentions on most recent observed day (2026-03-15)
3 total mentions across 2 days

Affected systems

Vendors

color

Products

iccdev

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-14	1	Disclosure1
2026-03-15	2	Disclosure2

Full discourse3 posts

Infoflowcloud@infoflowcloud207d
Disclosure
🚨*CVE* CVE-2026-30987 iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in CIccTagNum<>::GetVa… https://www.cve.org/CVERecord?id=CVE-2026-30987 ----- Traducción: CVE-2026-30987 icc… http://infoflow.cloud`
Post summary
The post announces CVE-2026-30987 and identifies a stack buffer overflow in versions of iccDEV before 2.3.1.5, but provides no PoC, exploit details, active exploitation evidence, or patch information.
0000035
57 followersView on X
CVE@CVEnew207d
Disclosure
CVE-2026-30987 iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in CIccTagNum<>::GetVa… https://www.cve.org/CVERecord?id=CVE-2026-30987
Post summary
The text announces CVE-2026-30987 as a stack buffer overflow in ICCDev libraries prior to version 2.3.1.5, providing technical detail but no PoC, exploits, or remediation info.
00000217
56.7K followersView on X
DailyCVE@dailycve208d
Disclosure
🔴 iccDEV, Stack Buffer Overflow, #CVE-2026-30987 (Critical) https://dailycve.com/iccdev-stack-buffer-overflow-cve-2026-30987-critical/
Post summary
The post announces a stack buffer overflow vulnerability (CVE‑2026‑30987) in iccDEV, rated critical, but does not provide PoC, exploit code, or patch information.
0000037
168 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	color	iccdev	-	-	-

Explore more

Back to dashboard color CVEs iccdev vulnerabilities