Description
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a vulnerability IccCmm.cpp:5793 when reading through index during ICC profile processing. The malformed ICC profile triggers improper array bounds validation in the color management module, resulting in an out-of-bounds read that can lead to memory disclosure or segmentation fault from accessing memory beyond the array boundary. This issue has been patched in version 2.3.1.3.
INFO
Published Date :
2026-02-04T22:13:30.803Z
Last Modified :
2026-02-05T15:07:43.492Z
Source :
GitHub_M
AFFECTED PRODUCTS
The following products are affected by CVE-2026-25585 vulnerability.
| Vendors | Products |
|---|---|
| Color |
|
| Internationalcolorconsortium |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2026-25585.
