CVE-2024-38427: Color Demoiccmax

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

In International Color Consortium DemoIccMAX before 85ce74e, a logic flaw in CIccTagXmlProfileSequenceId::ParseXml in IccXML/IccLibXML/IccTagXml.cpp results in unconditionally returning false.

Affected products

• Color Demoiccmax: before 85ce74e (fixed in 85ce74e)

Published 2024-06-16. Last modified 2026-06-17.