Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2026-21485

Good to know:

icon

Date: January 5, 2026

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are prone to have Undefined Behavior (UB) and Out of Memory errors. This issue is fixed in version 2.3.1.2.

Severity Score

Related Resources (5)

https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-chp2-4gv5-2432
https://github.com/InternationalColorConsortium/iccDEV/commit/c136aac51d25cbb4d9db63f071edad4f088843df
https://nvd.nist.gov/vuln/detail/CVE-2026-21485
https://github.com/InternationalColorConsortium/iccDEV/issues/340
https://www.mend.io/vulnerability-database/CVE-2026-21485

Severity Score

Weakness Type (CWE)

Integer Overflow or Wraparound

CWE-190

Improper Input Validation

CWE-20

NULL Pointer Dereference

CWE-476

Out-of-bounds Read

CWE-125

Out-of-bounds Write

CWE-787

Uncontrolled Resource Consumption

CWE-400

Improper Validation of Specified Quantity in Input

CWE-1284

Top Fix

icon

Upgrade Version

Upgrade to version https://github.com/InternationalColorConsortium/iccDEV.git - v2.3.1.2

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

Do you need more information?

Contact Us