CVE-2026-31793: iccDEV has a SEGV in CIccCalculatorFunc::ApplySequence()
Published Mar 10, 2026
·Updated
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a segmentation fault due to invalid/wild pointer read in CIccCalculatorFunc::ApplySequence() causing denial of service. This vulnerability is fixed in 2.3.1.5.
Affected Software
2 affected components
iccDEV iccDEV Libraries<2.3.1.5
Color iccDEV<2.3.1.5
Remediation
Event History
Mar 10, 2026
CVE Published
via MITRE·06:01 PM
Data Sourced
via MITRE·06:01 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:18 PM
RemedyDescriptionSeverityWeaknessAffected Software
Nov 13, 58169
Event
via FIRST·10:07 AM
Frequently Asked Questions
1
What is the severity of CVE-2026-31793?
CVE-2026-31793 is classified as a denial of service vulnerability due to a segmentation fault.
2
How do I fix CVE-2026-31793?
To fix CVE-2026-31793, update your iccDEV Libraries to version 2.3.1.5 or later.
3
What causes CVE-2026-31793?
CVE-2026-31793 is caused by an invalid or wild pointer read in the CIccCalculatorFunc::ApplySequence() function.
4
Which versions of iccDEV are affected by CVE-2026-31793?
Versions of iccDEV Libraries prior to 2.3.1.5 are affected by CVE-2026-31793.
5
What impact does CVE-2026-31793 have on systems?
CVE-2026-31793 can lead to application crashes and denial of service on affected systems.