CVE-2026-24409 | InternationalColorConsortium iccDEV up to 2.3.1.1/2.3.1.2 ParseXml input validation (ID 484)

A vulnerability, which was classified as critical, has been found in InternationalColorConsortium iccDEV up to 2.3.1.1/2.3.1.2. The affected element is the function CIccTagXmlFloatNum<>::ParseXml. Performing a manipulation results in improper input validation.

This vulnerability is reported as CVE-2026-24409. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.