CVE-2026-25582 | InternationalColorConsortium iccDEV 2.3.1.1/2.3.1.2 CIccIO::WriteUInt16Float heap-based overflow (ID 559)

A vulnerability was found in InternationalColorConsortium iccDEV 2.3.1.1/2.3.1.2. It has been declared as critical. Impacted is the function CIccIO::WriteUInt16Float. The manipulation results in heap-based buffer overflow.

This vulnerability was named CVE-2026-25582. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.