Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2026-21493

Good to know:

icon

Date: January 6, 2026

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are vulnerable to Type Confusion in its CIccSingleSampledeCurveXml class during XML Curve Serialization. This issue is fixed in version 2.3.1.2.

Severity Score

Related Resources (5)

https://github.com/InternationalColorConsortium/iccDEV/issues/358
https://nvd.nist.gov/vuln/detail/CVE-2026-21493
https://github.com/InternationalColorConsortium/iccDEV/commit/7ff76d1471077172f9659de8d9536443eac7c48f
https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-p85g-f9q7-jmjx
https://www.mend.io/vulnerability-database/CVE-2026-21493

Severity Score

Weakness Type (CWE)

Reliance on Data/Memory Layout

CWE-188

Access of Resource Using Incompatible Type ('Type Confusion')

CWE-843

Improper Check or Handling of Exceptional Conditions

CWE-703

Top Fix

icon

Upgrade Version

Upgrade to version https://github.com/InternationalColorConsortium/iccDEV.git - v2.3.1.2

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): HIGH

Do you need more information?

Contact Us