A heap‑buffer‑overflow in CTiffImg::WriteLine() can be triggered by a crafted ICC profile and TIFF file, resulting in an out‑of‑bounds heap read and a crash during strip writing. The crash disables the affected component but does not directly allow arbitrary code execution or data disclosure.

The issue affects the International Color Consortium’s iccDEV library and tools, specifically all releases prior to version 2.3.1.6. The vulnerability is tied to the iccSpecSepToTiff routine that processes ICC and TIFF input.

The CVSS score of 6.2 indicates moderate severity. No EPSS data is available, and the vulnerability is not listed in CISA’s KEV catalog, suggesting it is not widely exploited but remains a risk. The likely attack vector is local or within an environment where malicious ICC/TIFF files can be supplied to iccDEV; it does not appear to enable remote execution or data compromise.