Issues

• Bisect: CIccTagMultiProcessElement::Apply() sbo-60w

  BisectciCodexdaybreak-bluelibFuzzerQAsecurityTriaged
  Bug

  InternationalColorConsortium/iccDEV#2868 · Filter by author xsscx opened on Oct 19, 2026 · v2.3.3.0
  4

  

• Research: JSON CRLF & ESC sequence is decoded then written to output unmodified

  BurpSuiteCodexJSONneeds-triageQAResearch
  Bug

  InternationalColorConsortium/iccDEV#2852 · Filter by author xsscx opened on Oct 18, 2026 · v2.3.3.0
  3

  

• Research: MPE calculator error paths append an unmatched quote after the newline

  BurpSuiteCodexdaybreak-blueneeds-triageQAResearch
  Bug

  InternationalColorConsortium/iccDEV#2851 · Filter by author xsscx opened on Oct 18, 2026
  2

  

• Research: DRD at CIccApplyThreadedCmmPool::~CIccApplyThreadedCmmPool() (IccProfLib/IccCmmThread.cpp:99)

  ciCodeQLdaybreak-blueQAResearchTestingTriagedValgrind
  Bug

  InternationalColorConsortium/iccDEV#2850 · Filter by author xsscx opened on Oct 18, 2026 · v2.3.3.0
  2

  

• Bisect: 1f0a9dd CIccPcsXform::GetNewApply() ub

  BisectcilibFuzzerQATestingTriagedValgrind
  Bug

  InternationalColorConsortium/iccDEV#2849 · Filter by author xsscx opened on Oct 18, 2026 · v2.3.3.0
  3

  

• QA Report: Unknown 'hdgm' = 6864676D PrivateTag

  needs-triageQA
  Bug

  InternationalColorConsortium/iccDEV#2848 · Filter by author xsscx opened on Oct 18, 2026 · v2.3.3.0
  1

  

• QA Report: iccApplyToLink outputs a .cube that cannot be read by iccFromCube

  Buildneeds-triageQATesting
  Bug

  InternationalColorConsortium/iccDEV#2847 · Filter by author xsscx opened on Oct 18, 2026 · v2.3.3.0
  1

  

• QA Report: Json Parsing throws Unknown 'aapy' = 61617079 while XML is Silent

  JSONneeds-triageQA
  Bug

  InternationalColorConsortium/iccDEV#2846 · Filter by author xsscx opened on Oct 18, 2026 · v2.3.3.0
  1

  

• QA Report: calculator sub-element Reserved accepts malformed decimal

  BuildciCodexneeds-triageQA
  Bug

  InternationalColorConsortium/iccDEV#2840 · Filter by author xsscx opened on Oct 13, 2026 · v2.3.3.0
  1

  

• QA Report: tint-array number-tag reserved accepts a decimal prefix

  ciCodexneeds-triageQA
  Bug

  InternationalColorConsortium/iccDEV#2839 · Filter by author xsscx opened on Oct 13, 2026 · v2.3.3.0
  1

  

• QA Report: XML Parser: three output channels declared, a fourth BCurve is silently discarded

  Codexneeds-triageQAXML
  Bug

  InternationalColorConsortium/iccDEV#2838 · Filter by author xsscx opened on Oct 13, 2026 · v2.3.3.0
  1

  

• QA Report: CRLF passed into .cube file | HTTP Header Injection

  BuildBurpSuiteneeds-triageQATesting
  Bug

  InternationalColorConsortium/iccDEV#2837 · Filter by author xsscx opened on Oct 13, 2026 · v2.3.3.0
  1

  

• QA Report: malformed VendorFlags="0g1" is accepted with exit 0

  ciCodexneeds-triageQAXML
  Bug

  InternationalColorConsortium/iccDEV#2836 · Filter by author xsscx opened on Oct 13, 2026 · v2.3.3.0
  1

  

• CI: Punch List #2834

  ciDocumentationJSONneeds-triageTesting
  Report

  InternationalColorConsortium/iccDEV#2835 · Filter by author xsscx opened on Oct 13, 2026 · v2.3.3.0
  1

  

• Research: named-color range defect: [-1,65536,32768] is silently written as [0,65535,32768]

  Codexneeds-triageQA
  Bug

  InternationalColorConsortium/iccDEV#2832 · Filter by author xsscx opened on Oct 13, 2026 · v2.3.3.0
  1

  

• Bisect: 1f0a9dd CIccXformNamedColor::SetSrcSpace()

  BisectciCodexQAResearchTriagedValgrind
  Bug

  InternationalColorConsortium/iccDEV#2830 · Filter by author xsscx opened on Oct 13, 2026 · v2.3.3.0
  3

  

• QA Report: ProfileID parsing also accepts malformed hex

  CodexJSONneeds-triageQA
  Bug

  InternationalColorConsortium/iccDEV#2828 · Filter by author xsscx opened on Oct 13, 2026 · v2.3.3.0
  1

  

• QA Report: XML <Header> <Reserved> accepts malformed hex

  Codexneeds-triageQA
  Bug

  InternationalColorConsortium/iccDEV#2827 · Filter by author xsscx opened on Oct 13, 2026 · v2.3.3.0
  1

  

• Add: Shared HEIF image reader/writer & iccApplyProfiles

  HEIFQATriaged
  Task

  InternationalColorConsortium/iccDEV#2813 · Filter by author xsscx opened on Oct 12, 2026 · v2.3.3.0
  1

  

• XML and JSON readers accept curve segments that do not join, so a segmented curve evaluates one way as parsed and another as written (IccMpeXml.cpp:1320, IccMpeJson.cpp:425, IccMpeBasic.cpp:3369)

  BuildciJSONneeds-triageTesting
  Bug

  InternationalColorConsortium/iccDEV#2804 · Filter by author colourbill-ctrl opened on Oct 8, 2026 · v2.3.3.0
  1

  

• Testing/hybrid: four fixtures embed an ICC.2 child of a different device space than the ICC.1 host, which Technical Note 04-2018 rules out

  Buildneeds-triagepawgTesting
  Bug

  InternationalColorConsortium/iccDEV#2781 · Filter by author colourbill-ctrl opened on Oct 6, 2026 · v2.3.3.0
  1

  

• CI: Punch List #2769

  cineeds-triage
  Report

  InternationalColorConsortium/iccDEV#2770 · Filter by author xsscx opened on Oct 6, 2026 · v2.3.3.0
  3

  

• Testing/SpecRef RefDecC, RefDecH, RefIncW: spectral data colour space on an Abstract profile is not defined by ICC.2-2023

  cineeds-triagepawgSpecTesting
  Report

  InternationalColorConsortium/iccDEV#2756 · Filter by author colourbill-ctrl opened on Oct 4, 2026
  3

  

• Research: Initilization only when JSON keys are present

  DocumentationJSONneeds-triageQA
  Bug

  InternationalColorConsortium/iccDEV#2681 · Filter by author xsscx opened on Sep 23, 2026 · v2.3.2.4
  2

  

• iccToJson reports success while writing a CurveSetElement with no curves, and iccFromJson then refuses the document it wrote (IccTagJson.cpp:2837, IccMpeJson.cpp:628)

  ciDocumentationJSONneeds-triageQuestionTesting
  Bug

  InternationalColorConsortium/iccDEV#2622 · Filter by author colourbill-ctrl opened on Sep 20, 2026
  2