CVE-2026-24412: high-severity vulnerability in InternationalColorConsortium iccDEV
iccDEV has Heap Buffer Overflow in icCurvesFromXml()
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.8epss 0.6%
In short
iccDEV has a memory safety flaw where specially crafted ICC color profile files can overflow a buffer, potentially crashing the application or allowing an attacker to execute malicious code.
Technical detail
Heap buffer overflow in CIccTagXmlSegmentedCurve::ToXml() due to insufficient input validation (CWE-122, CWE-20) when processing user-supplied ICC profile data; exploitation requires a malformed profile file and can result in denial of service, data corruption, or arbitrary code execution.
Summary generated and translated by AI from the official description.
iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have aHeap Buffer Overflow vulnerability in the CIccTagXmlSegmentedCurve::ToXml() function. This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and Code Execution. This issue has been fixed in version 2.3.1.2.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
InternationalColorConsortium · iccDEVRelated CVEs — InternationalColorConsortium iccDEV
In the same product, most dangerous first.
CVE-2026-22861HIGHiccDEV has a heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cppEPSS 0.7%CVE-2026-24406HIGHiccDEV has Heap Buffer Overflow in CIccTagNamedColor2::SetSize()EPSS 0.6%CVE-2026-24405HIGHiccDEV has Heap Buffer Overflow in CIccMpeCalculator::Read()EPSS 0.6%CVE-2026-24407HIGHiccDEV has Undefined Behavior in icSigCalcOp()EPSS 0.5%CVE-2026-24404HIGHiccDEV has Null Pointer Deference and Undefined Behavior in CIccXmlArrayType()EPSS 0.5%CVE-2026-24403HIGHiccDEV Undefined Behavior in CIccProfile::CheckHeader() Leads to Integer OverflowEPSS 0.5%