Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2026-21487

iccDEV has Out-of-bounds Read, Use of Out-of-range Pointer Offset and Improper Input Validation

Description

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below have an Out-of-bounds Read, Use of Out-of-range Pointer Offset and have Improper Input Validation in its CIccProfile::LoadTag function. This issue is fixed in version 2.3.1.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

InternationalColorConsortium iccDEV

  • < 2.3.1.2affected

References