CVE-2026-25584

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-25584
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-25584.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-25584
Aliases
  • GHSA-xjr3-v3vr-5794
Published
2026-02-04T22:11:10Z
Modified
2026-08-12T15:32:58Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
iccDEV vulnerable to Stack-based Buffer Overflow in CIccTagFloatNum::GetValues()
Details

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a stack-buffer-overflow vulnerability in CIccTagFloatNum<>::GetValues(). This is triggered when processing a malformed ICC profile. The vulnerability allows an out-of-bounds write on the stack, potentially leading to memory corruption, information disclosure, or code execution when processing specially crafted ICC files. This issue has been patched in version 2.3.1.3.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-119",
        "CWE-121",
        "CWE-787",
        "CWE-788"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25584.json"
}
References

Affected packages

Git / github.com/internationalcolorconsortium/iccdev

Affected ranges

Type
GIT
Repo
https://github.com/internationalcolorconsortium/iccdev
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
8036be2faf68726aa3ab077e150a564a48a15fc1
Fixed
c9cb108f58683bd87afca616dea3e4cdb884c23f
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.3.1.3"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

v2.*
v2.2.6
v2.3.1
v2.3.1.1
v2.3.1.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-25584.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "236351041048278844293847761880580931389",
                "254870778974708640058287817001963101247",
                "76041668870973614335184600039793579029",
                "68860175967881787970267527047841309937",
                "44249768351532170479120313573590906600",
                "100483335112756748135156026865786483288",
                "179990973985654951720026448158259392160"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-25584-7f9d2851",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/internationalcolorconsortium/iccdev/commit/c9cb108f58683bd87afca616dea3e4cdb884c23f",
        "target": {
            "file": "IccProfLib/IccCmm.cpp"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "157348679453689634478456058783439356759",
            "length": 223
        },
        "id": "CVE-2026-25584-965a0e0b",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/internationalcolorconsortium/iccdev/commit/c9cb108f58683bd87afca616dea3e4cdb884c23f",
        "target": {
            "file": "IccProfLib/IccTagBasic.cpp",
            "function": "GetValues"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "251501019327073989458493477009562871641",
            "length": 4949
        },
        "id": "CVE-2026-25584-99fd31ce",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/internationalcolorconsortium/iccdev/commit/c9cb108f58683bd87afca616dea3e4cdb884c23f",
        "target": {
            "file": "IccProfLib/IccCmm.cpp",
            "function": "CIccNamedColorCmm::AddXform"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "281240000436319717193314706747386196139",
                "34327239801477293809037820977902757821",
                "122590995284186209063051393293262408108",
                "109389682491520771680674791158117847793",
                "50522764188255486571904805798605298191",
                "186225353590621834406418076636715000960",
                "164342040765782148908900277420619378784"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-25584-c5a4212f",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/internationalcolorconsortium/iccdev/commit/c9cb108f58683bd87afca616dea3e4cdb884c23f",
        "target": {
            "file": "IccProfLib/IccTagBasic.cpp"
        }
    }
]
vanir_signatures_modified 
"2026-08-12T15:32:58Z"