Low severity3.3NVD Advisory· Published Jan 6, 2026· Updated Jun 17, 2026
CVE-2026-21674
CVE-2026-21674
Description
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a memory leak vulnerability in its XML MPE Parsing Path (iccFromXml). This issue is fixed in version 2.3.1.1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<=2.3.1+ 1 more
- (no CPE)range: <=2.3.1
- (no CPE)range: < 2.3.1.1
Patches
Vulnerability mechanics
References
3- github.com/InternationalColorConsortium/iccDEV/commit/d7028d8f558bb681efe2b85f02eb4ca374502cbbnvdPatch
- github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-xww6-v3vg-4qc7nvdPatchVendor Advisory
- github.com/InternationalColorConsortium/iccDEV/issues/241nvdExploitIssue TrackingVendor Advisory
News mentions
0No linked articles in our index yet.