Heap-Based Buffer Overflow in ICC Library from International Color Consortium
CVE-2026-31796

7.8HIGH

Key Information:

Vendor: Internationalcolorconsortium
Status: Iccdev
Vendor: CVE Published:; 10 March 2026

🔔 Create Internationalcolorconsortium Vulnerability Alert

What is CVE-2026-31796?

The iccDEV library, designed for managing ICC color profiles, is susceptible to a heap-based buffer overflow in the function icCurvesFromXml(). This vulnerability can lead to heap memory corruption or application crashes, potentially affecting the stability and reliability of applications utilizing the library. This issue has been addressed in version 2.3.1.5, thus users are advised to update to avoid these potential risks.