PT-2026-1394 · Iccdev · Iccdev

·

CVE-2026-21674

·

Published

2026-01-06

·

Updated

2026-01-06

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.1
Description iccDEV is a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have a memory leak in the XML MPE Parsing Path (iccFromXml).
Recommendations Update to version 2.3.1.1 or later.

Exploit

Fix

Memory Leak

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-21674
GHSA-XWW6-V3VG-4QC7

Affected Products

Iccdev