CVE-2026-21492

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-21492
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a NULL pointer member call vulnerability. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/InternationalColorConsortium/iccDEV/commit/b200a629ada310137d6ae5c53fc9e6d91a4b0dae Patch
https://github.com/InternationalColorConsortium/iccDEV/commit/e72361d215351cbac0002466c4f936e94d6a99e7 Patch
https://github.com/InternationalColorConsortium/iccDEV/issues/394 Exploit Issue Tracking Vendor Advisory
https://github.com/InternationalColorConsortium/iccDEV/pull/401 Patch
https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-xpq3-v3jj-mgvx Patch Vendor Advisory
https://github.com/InternationalColorConsortium/iccDEV/issues/394 Exploit Issue Tracking Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*
History

17 Jun 2026, 10:18

Type Values Removed Values Added
Summary
  • (es) iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del International Color Consortium (ICC). Las versiones anteriores a la 2.3.1.2 tienen una vulnerabilidad de llamada a miembro de puntero NULL. Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles.
References () https://github.com/InternationalColorConsortium/iccDEV/issues/394 - Issue Tracking, Exploit, Vendor Advisory () https://github.com/InternationalColorConsortium/iccDEV/issues/394 - Exploit, Issue Tracking, Vendor Advisory

12 Jan 2026, 18:30

Type Values Removed Values Added
CPE cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*
First Time Color
Color iccdev
References () https://github.com/InternationalColorConsortium/iccDEV/commit/b200a629ada310137d6ae5c53fc9e6d91a4b0dae - () https://github.com/InternationalColorConsortium/iccDEV/commit/b200a629ada310137d6ae5c53fc9e6d91a4b0dae - Patch
References () https://github.com/InternationalColorConsortium/iccDEV/commit/e72361d215351cbac0002466c4f936e94d6a99e7 - () https://github.com/InternationalColorConsortium/iccDEV/commit/e72361d215351cbac0002466c4f936e94d6a99e7 - Patch
References () https://github.com/InternationalColorConsortium/iccDEV/issues/394 - () https://github.com/InternationalColorConsortium/iccDEV/issues/394 - Issue Tracking, Exploit, Vendor Advisory
References () https://github.com/InternationalColorConsortium/iccDEV/pull/401 - () https://github.com/InternationalColorConsortium/iccDEV/pull/401 - Patch
References () https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-xpq3-v3jj-mgvx - () https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-xpq3-v3jj-mgvx - Patch, Vendor Advisory

07 Jan 2026, 19:15

Type Values Removed Values Added
References () https://github.com/InternationalColorConsortium/iccDEV/issues/394 - () https://github.com/InternationalColorConsortium/iccDEV/issues/394 -

06 Jan 2026, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2026-01-06 21:15

Updated : 2026-06-17 10:18

NVD link : CVE-2026-21492

Mitre link : CVE-2026-21492

CVE.ORG link : CVE-2026-21492

JSON object : View

Products Affected

color

  • iccdev
CWE
CWE-252

Unchecked Return Value

CWE-476

NULL Pointer Dereference