CVE-2026-21493

Published January 6th, 2026

View on NVD ↗

CVSS v3

6.6

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are vulnerable to Type Confusion in its CIccSingleSampledeCurveXml class during XML Curve Serialization. This issue is fixed in version 2.3.1.2.

InternationalColorConsortium/iccDEV

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.

GitHub

163