Search/CVE-2026-50278

● CVE — Medium

CVE-2026-50278

DiscoveredAug 21, 2026UpdatedSep 18, 2026

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions prior to 2.3.2.1 have a CIccEmbedIO::Read8() size_t underflow. The issue arises due to an embedded-profile read defect when parsing ICC profiles containing icSigEmbeddedV5ProfileTag data with icSigEmbeddedProfileType payloads. Version 2.3.2.1 patches the issue. No known workarounds are available.

View graph Watch Export

CVSS v3.1

6.5 MEDIUM

EPSS

0.45%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

0

sources referencing this CVE

Related IOCs

0

seen in the same coverage

EPSS Trend

Aug 23, 2026 → Sep 25, 2026

▲ 0.20pp

0.25% → 0.45% over 2 tracked changes

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

ScopeUNCHANGED

ConfidentialityNONE

IntegrityNONE

AvailabilityHIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Connections

3 relationships

Timeline

disclosure → media coverage

Aug 21, 2026

Disclosure — published as a CVE record. · last revised by NVD Sep 18, 2026