CVE-2026-50278
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
iccDEV before version 2.3.2.1 has a size_t underflow vulnerability in the `CIccEmbedIO::Read8()` function. The issue occurs when parsing ICC profiles containing `icSigEmbeddedV5ProfileTag` data with `icSigEmbeddedProfileType` payloads, potentially leading to incorrect behavior.
Risk Assessment
The vulnerability may lead to application crashes or unpredictable behavior when processing malicious ICC profiles, potentially enabling DoS attacks.
Recommendation
Upgrade iccDEV to version 2.3.2.1 or later, which includes the fix.
Other vulnerabilities in iccDEV
See all- CVE-2026-24412High
The iccDEV library versions 2.3.1.1 and below have a heap buffer overflow vulnerability in the CIccTagXmlSegmentedCurve::ToXml() function. This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and code execution. This issue has been fixed in version 2.3.1.2.
- CVE-2026-24411High
The iccDEV library versions 2.3.1.1 and below have undefined behavior in the CIccTagXmlSegmentedCurve::ToXml() function. This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and code execution. This issue has been fixed in version 2.3.1.2.
- CVE-2026-24410High
The iccDEV library versions 2.3.1.1 and below have undefined behavior and null pointer dereference in the CIccProfileXml::ParseBasic() function. This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and code execution. This issue has been fixed in version 2.3.1.2.
- CVE-2026-24409High
The iccDEV library versions 2.3.1.1 and below have undefined behavior and null pointer dereference in the CIccTagXmlFloatNum<>::ParseXml() function. This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and code execution. This issue has been fixed in version 2.3.1.2.
- CVE-2026-24407High
The iccDEV library versions 2.3.1.1 and below have undefined behavior in the icSigCalcOp() function. This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and code execution. This issue has been fixed in version 2.3.1.2.
- CVE-2026-24406High
The iccDEV library versions 2.3.1.1 and below have a heap buffer overflow vulnerability in the CIccTagNamedColor2::SetSize() function. This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and code execution. This issue has been fixed in version 2.3.1.2.
- CVE-2026-24405High
The iccDEV library versions 2.3.1.1 and below have a heap buffer overflow vulnerability in the CIccMpeCalculator::Read() function. This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and code execution. This issue has been fixed in version 2.3.1.2.
- CVE-2026-24404High
The iccDEV library versions 2.3.1.1 and below have a null pointer dereference and undefined behavior vulnerability in CIccXmlArrayType(). This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and code execution. This issue has been fixed in version 2.3.1.2.
- CVE-2026-24403High
The iccDEV library versions 2.3.1.1 and below have an integer overflow vulnerability in icValidateStatus CIccProfile::CheckHeader() when user-controllable input is incorporated into profile data unsafely. Tampering with tag tables, offsets, or size fields can trigger parsing errors, memory corruption, or DoS, potentially enabling arbitrary code execution or bypassing application logic. This issue has been fixed in version 2.3.1.2.
- CVE-2026-22861High
The iccDEV library before version 2.3.1.2 contains a heap-based buffer overflow vulnerability in the SIccCalcOp::Describe() function in IccProfLib/IccMpeCalc.cpp. This affects users who process ICC color profiles.
Original NVD description (English source)
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions prior to 2.3.2.1 have a `CIccEmbedIO::Read8()` size_t underflow. The issue arises due to an embedded-profile read defect when parsing ICC profiles containing `icSigEmbeddedV5ProfileTag` data with `icSigEmbeddedProfileType` payloads. Version 2.3.2.1 patches the issue. No known workarounds are available.