Heap-based Buffer Overflow Vulnerability in ICC Color Management Library by iccDEV
CVE-2026-30979

7.8HIGH

Key Information:

Vendor: Internationalcolorconsortium
Status: Iccdev
Vendor: CVE Published:; 10 March 2026

🔔 Create Internationalcolorconsortium Vulnerability Alert

What is CVE-2026-30979?

The ICC Color Management Library by iccDEV contains a heap-based buffer overflow vulnerability in the CIccCalculatorFunc::InitSelectOp() function. This vulnerability can be exploited through local user interactions, leading to memory corruption and potential crashes of applications utilizing the affected library. The issue has been addressed in version 2.3.1.5, emphasizing the importance for users to update their installations to ensure security and stability.