Unrated severityNVD Advisory· Published Jan 7, 2026· Updated Jan 7, 2026

Stack Overflow in iccDEV XML Calculator Macro Expansion

CVE-2026-21500

Description

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to stack overflow in the XML calculator macro expansion. This issue has been patched in version 2.3.1.2.

Affected products

iccDEV/iccDEVllm-fuzzy
Range: <=2.3.1.2
InternationalColorConsortium/iccDEVv5
Range: < 2.3.1.2

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/InternationalColorConsortium/iccDEV/commit/cce5f9b68a6c067b7ef898ccd5b000770745fb14mitrex_refsource_MISC
github.com/InternationalColorConsortium/iccDEV/commit/f295826a6f15add90490030f23b2ddd8593bff5bmitrex_refsource_MISC
github.com/InternationalColorConsortium/iccDEV/issues/384mitrex_refsource_MISC
github.com/InternationalColorConsortium/iccDEV/pull/406mitrex_refsource_MISC
github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-4h4j-mm9w-2cp4mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000