PT-2026-21911

CVE-2026-27691

Published

2026-02-25

Updated

2026-02-25

Description by

CVSS 3.1

6.2

Medium

MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.5

Description iccDEV is a set of libraries and tools for working with ICC color management profiles. A signed integer overflow in the iccFromCube.cpp file during multiplication can lead to undefined behavior, potentially causing crashes or incorrect ICC profile generation when processing specially crafted or large cube inputs. The issue is addressed by commit 43ae18dd69fc70190d3632a18a3af2f3da1e052a.

Recommendations Update to a version later than 2.3.1.4.

Exploitability

Exploit

Fix

Impacts

Researchers

Sy460129

Vendors

Affected products

Weakness enumeration

CWE-190: Integer Overflow or Wraparound

CWE-681: Incorrect Conversion between Numeric Types