Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-21507

iccDEV is Vulnerable to Denial of Service via Infinite Loop in CalcProfileID()

Description

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have an infinite loop in the IccProfile.cpp function, CalcProfileID. This issue is fixed in version 2.3.1.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

InternationalColorConsortium iccDEV

  • < 2.3.1.1affected

References