Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-25502

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, stack-based buffer overflow in icFixXml() function when processing malformed ICC profiles, allows potential arbitrary code execution through crafted NamedColor2 tags. This issue has been patched in version 2.3.1.2.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 2.3%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2026-25502
  • Color » Iccdev » Version: Any
    cpe:2.3:a:color:iccdev:*


Products
Pricing
Contact Us

Shodan ® - All rights reserved