A vulnerability was found in InternationalColorConsortium iccDEV 2.3.1.1/2.3.1.2. It has been rated as critical. This affects the function CIccTagFloatNum<>::GetValues of the component ICC File Parser. This manipulation causes memory corruption.

This vulnerability is tracked as CVE-2026-25584. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.