Description

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have an infinite loop in the IccProfile.cpp function, CalcProfileID. This issue is fixed in version 2.3.1.1.

Related CPE's

a

color

iccdev

Vulnerable

References

https://github.com/InternationalColorConsortium/iccDEV/commit/3f3ce789d0d2b608c194ed172fa38943519dc198

Patch

https://github.com/InternationalColorConsortium/iccDEV/issues/244

Issue TrackingExploitVendor Advisory

https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-hgp5-r8m9-8qpj

PatchVendor Advisory

Weaknesses

[email protected]

Primary
CWE-835

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 · High

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2026-01-06T01:16:01.917Z

6 days ago

Last modified

2026-01-12T21:04:26.417Z

3 hours ago