Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow in icCurvesFromXml() causing heap memory corruption or crash. This vulnerability is fixed in 2.3.1.5.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-11 | 2 | Disclosure2 |
| 2026-03-14 | 1 | Disclosure1 |
🟠 iccDEV, Heap-based Buffer Overflow, #CVE-2026-31796 (Medium) https://dailycve.com/iccdev-heap-based-buffer-overflow-cve-2026-31796-medium/
Post summary
The post announces the existence of a medium‑severity heap‑based buffer overflow in iccDEV (CVE‑2026‑31796), but provides no PoC, exploit code, patch information, or evidence of active exploitation.
🚨*CVE* CVE-2026-31796 iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow in icCurvesFromXm… https://www.cve.org/CVERecord?id=CVE-2026-31796 ----- Traducción: CVE-2026-31796 icc… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑31796, a heap-based buffer overflow in iccDEV libraries before version 2.3.1.5, without mentioning any PoC, exploit code, or patch.
CVE-2026-31796 iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow in icCurvesFromXm… https://www.cve.org/CVERecord?id=CVE-2026-31796
Post summary
The post announces a heap‑based buffer overflow in icCurvesFromXm of iccDEV before version 2.3.1.5, without indicating any PoC, exploit code, active attacks, or available patch.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | color | iccdev | - | - | - |