iccDEV has a heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp

iccDEV has a heap buffer overflow vulnerability in its color profile processing code that can crash the application or potentially allow attackers to execute malicious code when processing specially crafted ICC color profiles.

A heap-based buffer overflow exists in the SIccCalcOp::Describe() function (IccProfLib/IccMpeCalc.cpp) triggered by improper bounds checking when processing ICC profile data. The attack vector requires supplying a malformed ICC color profile to an application using the vulnerable iccDEV library; successful exploitation can lead to memory corruption, denial of service, or arbitrary code execution depending on heap layout and mitigations.