Heap Buffer Overflow in ICC Color Management Library by iccDEV

CVE-2026-24412

What is CVE-2026-24412?

The ICC Color Management Library by iccDEV is prone to a heap buffer overflow vulnerability in the CIccTagXmlSegmentedCurve::ToXml() function. This vulnerability arises when user inputs are mishandled within ICC profile data. An attacker exploiting this flaw could potentially initiate a denial of service, manipulate critical data, or execute arbitrary code. The issue has been rectified in version 2.3.1.2, underscoring the importance of updating to the latest version to safeguard against exploitation.

References