CVE-2026-21693highCWE-20CWE-681CWE-754CWE-843

CVE-2026-21693: high-severity vulnerability in InternationalColorConsortium iccDEV

iccDEV has Type Confusion in CIccSegmentedCurveXml::ToXml() at IccXML/IccLibXML/IccMpeXml.cpp

Published · Updated

Follow this CVE+ Monitor iccDEV

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.4%
In short

iccDEV library has a type confusion bug in its color profile processing code that can cause the program to crash or behave unpredictably when handling certain ICC color profiles. This affects anyone using iccDEV to work with color management files.

Technical detail

A type confusion vulnerability in CIccSegmentedCurveXml::ToXml() allows an attacker to craft a malicious ICC color profile that triggers incorrect type handling during XML serialization. The vulnerability requires processing of a specially crafted ICC profile file and can lead to denial of service or memory corruption.

Summary generated and translated by AI from the official description.
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in `CIccSegmentedCurveXml::ToXml()` at `IccXML/IccLibXML/IccMpeXml.cpp`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
InternationalColorConsortium · iccDEV
Related CVEs — InternationalColorConsortium iccDEV

In the same product, most dangerous first.

CVE-2026-22861HIGHiccDEV has a heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cppEPSS 0.7%CVE-2026-24412HIGHiccDEV has Heap Buffer Overflow in icCurvesFromXml()EPSS 0.6%CVE-2026-24406HIGHiccDEV has Heap Buffer Overflow in CIccTagNamedColor2::SetSize()EPSS 0.6%CVE-2026-24405HIGHiccDEV has Heap Buffer Overflow in CIccMpeCalculator::Read()EPSS 0.6%CVE-2026-24407HIGHiccDEV has Undefined Behavior in icSigCalcOp()EPSS 0.5%CVE-2026-24404HIGHiccDEV has Null Pointer Deference and Undefined Behavior in CIccXmlArrayType()EPSS 0.5%