EUVD-2026-10734

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in CIccTagNum::GetValues causing stack memory corruption or crash. This vulnerability is fixed in 2.3.1.5...

CVE-2026-30987 iccDEV has a stack buffer overflow in CIccTagNum<(icTagTypeSignature)>::GetValues()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in CIccTagNum::GetValues causing stack memory corruption or crash. This vulnerability is fixed in 2.3.1.5...

CVE-2026-25584

CVE-2026-25584 affects iccDEV prior to 2.3.1.3, where a stack-based buffer overflow occurs in the CIccTagFloatNum::GetValues()** when processing malformed ICC profiles. The issue allows an out-of-bounds write on the stack, potentially enabling memory corruption, information disclosure, or code ex...