CVE-2026-27691

Medium CVSS: 6.2

iccDEV provides a set of libraries and tools for working with ICC color management profiles. In versions up to and including 2.3.1.4, signed integer overflow in iccFromCube.cpp during multiplication triggers undefined behavior, potentially causing crashes or incorrect ICC profile generation when processing crafted/large cube inputs. Commit 43ae18dd69fc70190d3632a18a3af2f3da1e052a fixes the issue. No known workarounds are available.

Vendor

Color

Product

Iccdev

CWE

CWE-190

Yayın Tarihi

2026-02-25 15:20:52

Güncelleme

2026-02-26 15:50:36

Source Identifier

security-advisories@github.com

KEV Date Added

Kategoriler

CWE-190 Iccdev MEDIUM Color 2026

Referanslar

https://github.com/InternationalColorConsortium/iccDEV/commit/43ae18dd69fc70190d3632a18a3af2f3da1e052a https://github.com/InternationalColorConsortium/iccDEV/issues/607 https://github.com/InternationalColorConsortium/iccDEV/pull/611 https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-4gfj-4cjh-53v5