Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-21485

iccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()

Description

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are prone to have Undefined Behavior (UB) and Out of Memory errors. This issue is fixed in version 2.3.1.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

InternationalColorConsortium iccDEV

  • < 2.3.1.2affected

References