PT-2026-24351 · Iccdev · Iccdev

Xsscx · Publicado 2026-03-10 · Atualizado 2026-03-15 · CVE-2026-30982

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.5

Description iccDEV is a set of libraries and tools for working with ICC color management profiles. A heap out-of-bounds read exists in the CIccPcsXform::pushXYZConvert() function, leading to a crash and potential memory leakage.

Recommendations Update to version 2.3.1.5 or later.

Exploit

Correção

Improper Validation of Array Index

Out of bounds Read

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-129

CWE-125

CWE-122

Identificadores relacionados

CVE-2026-30982

GHSA-7WW3-H4W6-X5HF

Produtos afetados

Iccdev

Referências · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/30xxx/CVE-2026-30982.json · Exploit
• https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-7ww3-h4w6-x5hf · Aviso do Fabricante
• https://github.com/InternationalColorConsortium/iccDEV/releases/tag/v2.3.1.5 · Nota
• https://github.com/InternationalColorConsortium/iccDEV/pull/632 · Correção
• https://github.com/InternationalColorConsortium/iccDEV/issues/625 · Nota
• https://twitter.com/infoflowcloud/status/2033196092683133369 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-30982 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-30982 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2033194353842336216 · Publicação no Twitter