D Hoyt

**Name of the Vulnerable Software and Affected Versions** iccDEV versions prior to 2.3.1.2 **Description** iccDEV is a set of libraries and tools used for interacting with, manipulating, and applying ICC color management profiles. A heap-buffer-overflow exists in the `CIccLocalizedUnicode::GetText()` function in versions prior to 2.3.1.2. **Recommendations** Versions prior to 2.3.1.2 should be updated to version 2.3.1.2 or later.