iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are vulnerable to Type Confusion in its CIccSingleSampledeCurveXml class during XML Curve Serialization. This issue is fixed in version 2.3.1.2.
References
| Link | Resource |
|---|---|
| https://github.com/InternationalColorConsortium/iccDEV/commit/7ff76d1471077172f9659de8d9536443eac7c48f | Patch |
| https://github.com/InternationalColorConsortium/iccDEV/issues/358 | Exploit Issue Tracking Vendor Advisory |
| https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-p85g-f9q7-jmjx | Patch Vendor Advisory |
Configurations
History
14 Jan 2026, 18:46
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:* | |
| First Time |
Color
Color iccdev |
|
| References | () https://github.com/InternationalColorConsortium/iccDEV/commit/7ff76d1471077172f9659de8d9536443eac7c48f - Patch | |
| References | () https://github.com/InternationalColorConsortium/iccDEV/issues/358 - Exploit, Issue Tracking, Vendor Advisory | |
| References | () https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-p85g-f9q7-jmjx - Patch, Vendor Advisory |
06 Jan 2026, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-06 15:15
Updated : 2026-01-14 18:46
NVD link : CVE-2026-21493
Mitre link : CVE-2026-21493
CVE.ORG link : CVE-2026-21493
JSON object : View
Products Affected
color
- iccdev