CVE-2026-30984

Received Received - Intake

Heap Out-of-Bounds Read in iccDEV Causes Application Crash

Publication date: 2026-03-10

Last updated on: 2026-03-13

Assigner: GitHub, Inc.

Description

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CIccCalculatorFunc::ApplySequence() causing an application crash. This vulnerability is fixed in 2.3.1.5.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-03-10

Last Modified

2026-03-13

Generated

2026-07-27

AI Q&A

2026-03-10

EPSS Evaluated

2026-07-25

NVD

CVE-2026-30984

EUVD

EUVD-2026-10727

Affected Vendors & Products

Vendor	Product	Version / Range
color	iccdev	to 2.3.1.5 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-129	The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability exists in iccDEV, a set of libraries and tools for working with ICC color management profiles. Specifically, prior to version 2.3.1.5, there is a heap out-of-bounds read in the function CIccCalculatorFunc::ApplySequence(). This means that the program reads memory outside the allocated heap buffer, which can cause the application to crash.

Detection Guidance

I don't know

Impact Analysis

The primary impact of this vulnerability is that it can cause an application crash due to the heap out-of-bounds read. According to the CVSS score, the impact on availability is high (A:H), meaning the application may become unavailable or unstable. The confidentiality impact is low (C:L), and there is no impact on integrity (I:N).

Compliance Impact

I don't know

Mitigation Strategies

To mitigate this vulnerability, update iccDEV to version 2.3.1.5 or later, where the heap out-of-bounds read issue in CIccCalculatorFunc::ApplySequence() is fixed.

Hi! I’m here to help you understand CVE-2026-30984. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70