iccDEV color management tool crashes or becomes unstable

Summary

Using an outdated version of iccDEV (prior to 2.3.1.5) may cause the tool to crash or behave erratically when working with ICC color profiles. This can lead to data loss or system instability. Update to version 2.3.1.5 or later to resolve the issue.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
color	iccdev	<= 2.3.1.5	–

Original title

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in CIccTagNum<>::GetValues() causing stack memory cor...

Original description

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in CIccTagNum<>::GetValues() causing stack memory corruption or crash. This vulnerability is fixed in 2.3.1.5.

nvd CVSS3.1 7.8

Vulnerability type

CWE-120 Classic Buffer Overflow

CWE-121 Stack-based Buffer Overflow

CWE-787 Out-of-bounds Write