Stack Buffer Overflow Vulnerability in ICC Color Management Tools by iccDEV

CVE-2026-25584

What is CVE-2026-25584?

iccDEV's ICC Color Management Tools contain a stack-buffer overflow vulnerability within the CIccTagFloatNum<>::GetValues() function. This vulnerability can be exploited when handling specially crafted ICC profiles, leading to an out-of-bounds write on the stack. The exploitation of this flaw may result in memory corruption, information disclosure, or even unauthorized code execution. Users are encouraged to update to version 2.3.1.3 or later to mitigate these security risks.

References