CVE-2023-46602: Color Demoiccmax

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

In International Color Consortium DemoIccMAX 79ecb74, there is a stack-based buffer overflow in the icFixXml function in IccXML/IccLibXML/IccUtilXml.cpp in libIccXML.a.

Affected products

• Color Demoiccmax: version 2022-06-21 only

Published 2023-10-23. Last modified 2026-06-17.