CVE-2026-30981

MEDIUM6.1

iccDEV has a heap-buffer-overflow read in CIccXmlArrayType<>

Published Mar 10, 2026

Modified 6 days ago

Details

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-buffer-overflow read in CIccXmlArrayType<>::DumpArray() causing out-of-bounds read and/or crash. This vulnerability is fixed in 2.3.1.5.

References

WEB

https://github.com/InternationalColorConsortium/iccDEV/issues/627

WEB

https://github.com/InternationalColorConsortium/iccDEV/pull/631

WEB

https://github.com/InternationalColorConsortium/iccDEV/releases/tag/v2.3.1.5

WEB

https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-pmcg-2h65-35h8

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-30981

CVSS Analysis