Color

Color's vulnerability footprint concentrates in a small set of image-processing and color-management libraries and tools, including ICC development utilities and demonstration applications, that serve specialized technical and creative workflows. Despite the narrow product scope, these components operate in a foundational role within imaging pipelines and color-space conversion chains, giving their security posture relevance across dependent applications and workflows. The recurring weakness classes—improper input validation, out-of-bounds writes and reads, heap-based buffer overflows, and NULL pointer dereferences—reflect the memory-safety and parsing demands inherent to binary image-format handling and color-profile interpretation. Defenders integrating these libraries into downstream products should prioritize input sanitization and memory-safety review during intake; live severity, exploitation, and exposure counts are shown alongside this summary.