Medium severity5.5NVD Advisory· Published Jan 7, 2026· Updated Jun 17, 2026

CVE-2026-21496

Description

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the signature parser. This issue has been patched in version 2.3.1.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Color (software)/Iccdev
cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*
Range: <2.3.1.2
International Color Consortium/iccDEVllm-fuzzy2 versions
<2.3.1.2+ 1 more
- (no CPE)range: <2.3.1.2
- (no CPE)range: < 2.3.1.2

Patches

Vulnerability mechanics

References

github.com/InternationalColorConsortium/iccDEV/commit/0e51ceb427925b7e22f0465547df7506d35cda1cnvdPatch
github.com/InternationalColorConsortium/iccDEV/commit/b5ad23aceece3789bdf1c47bae1ecf9d7bfcd26dnvdPatch
github.com/InternationalColorConsortium/iccDEV/issues/381nvdExploitIssue Tracking
github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-wj8m-6w77-r4rwnvdThird Party Advisory
github.com/InternationalColorConsortium/iccDEV/pull/405nvdIssue Tracking

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000