CVE-2026-21485highCWE-125CWE-1284CWE-190CWE-20CWE-400CWE-476CWE-787

CVE-2026-21485: high-severity vulnerability in InternationalColorConsortium iccDEV

iccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()

Published

Follow this CVE+ Monitor iccDEV

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.4%
In short

iccDEV color profile library versions 2.3.1.1 and earlier have memory handling bugs that can cause crashes or unpredictable behavior when processing malformed ICC profile files. These flaws could be exploited by attackers distributing specially crafted color profile files.

Technical detail

CIccProfile::LoadTag() in iccDEV ≤2.3.1.1 contains out-of-bounds read conditions (CWE-125) and integer overflow vulnerabilities (CWE-190) leading to undefined behavior and memory exhaustion. Attack vector involves supplying maliciously crafted ICC profile files; no authentication required. Impact includes denial of service and potential information disclosure.

Summary generated and translated by AI from the official description.
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are prone to have Undefined Behavior (UB) and Out of Memory errors. This issue is fixed in version 2.3.1.2.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
InternationalColorConsortium · iccDEV
Related CVEs — InternationalColorConsortium iccDEV

In the same product, most dangerous first.

CVE-2026-22861HIGHiccDEV has a heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cppEPSS 0.7%CVE-2026-24412HIGHiccDEV has Heap Buffer Overflow in icCurvesFromXml()EPSS 0.6%CVE-2026-24406HIGHiccDEV has Heap Buffer Overflow in CIccTagNamedColor2::SetSize()EPSS 0.6%CVE-2026-24405HIGHiccDEV has Heap Buffer Overflow in CIccMpeCalculator::Read()EPSS 0.6%CVE-2026-24407HIGHiccDEV has Undefined Behavior in icSigCalcOp()EPSS 0.5%CVE-2026-24404HIGHiccDEV has Null Pointer Deference and Undefined Behavior in CIccXmlArrayType()EPSS 0.5%