Medium severity5.5NVD Advisory· Published Jan 7, 2026· Updated Jun 17, 2026

CVE-2026-21505

Description

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV has undefined behavior due to an invalid enum value. This issue has been patched in version 2.3.1.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Color (software)/Iccdev
cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*
Range: <2.3.1.2
International Color Consortium/iccDEVllm-fuzzy2 versions
<2.3.1.2+ 1 more
- (no CPE)range: <2.3.1.2
- (no CPE)range: < 2.3.1.2

Patches

Vulnerability mechanics

References

github.com/InternationalColorConsortium/iccDEV/commit/3bbe2088b2796cf0aa4f7fa19f7ccd9ad1c7aba5nvdPatch
github.com/InternationalColorConsortium/iccDEV/commit/b1bb72fc3e9442ee1355aabae7314bb7d3fc9d41nvdPatch
github.com/InternationalColorConsortium/iccDEV/issues/361nvdExploitIssue Tracking
github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-j577-8285-qrf9nvdThird Party Advisory
github.com/InternationalColorConsortium/iccDEV/pull/419nvdIssue Tracking

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000