iccDEV input validation error vulnerability

iccDEV is an open source color configuration code library from the International Color Consortium ICC. An input validation error vulnerability exists in versions prior to iccDEV 2.3.1.2, which stems from a heap buffer overflow in CIccLocalizedUnicode::GetText...

CVE-2026-21679: Improper Input Validation

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap-buffer-overflow in CIccLocalizedUnicode::GetText. This issue has been patched in version 2.3.1.2...