Vulnerability Database

322,129

Total vulnerabilities in the database

CVE-2026-21493

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are vulnerable to Type Confusion in its CIccSingleSampledeCurveXml class during XML Curve Serialization. This issue is fixed in version 2.3.1.2.

  • Published: Jan 6, 2026
  • Updated: Jan 15, 2026
  • CVE: CVE-2026-21493
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.6
  • AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

CWEs:

Software From Fixed in
color / iccdev - 2.3.1.2