A type confusion flaw exists in the CIccSegmentedCurveXml::ToXml() function of iccDEV. The incorrect handling of type expectations can corrupt program state when parsing ICC color profiles, enabling an attacker to execute arbitrary code or disrupt the system. The vulnerability may arise when a maliciously crafted profile is provided, so the impact depends on the ability to supply input to the library. Without additional safeguards, exploitation could compromise confidentiality, integrity, or availability of applications that rely on iccDEV.

The issue affects the International Color Consortium’s iccDEV library for all releases older than 2.3.1.2. Users who process ICC color profiles with these versions are at risk. No other vendors or product versions are listed as affected.

The CVSS score of 8.8 indicates a high‑severity vulnerability, while the EPSS score of less than 1% suggests a low current probability of exploitation. The vulnerability is not listed in CISA’s KEV catalog, implying it has not yet been observed in widespread exploits. The likely attack vector involves supplying a crafted ICC profile to an application that uses the vulnerable library; successful exploitation could lead to remote code execution.