CVE-2026-21493
6.6MEDIUMiccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are vulnerable to Type Confusion in its CIccSingleSampledeCurveXml class during
게시됨: 1/6/2026업데이트됨: 1/14/2026
설명
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are vulnerable to Type Confusion in its CIccSingleSampledeCurveXml class during XML Curve Serialization. This issue is fixed in version 2.3.1.2.
AI 분석AI 기반
영향받는 제품
coloriccdev
참조
- https://github.com/InternationalColorConsortium/iccDEV/commit/7ff76d1471077172f9659de8d9536443eac7c48fPatch
- https://github.com/InternationalColorConsortium/iccDEV/issues/358ExploitIssue TrackingVendor Advisory
- https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-p85g-f9q7-jmjxPatchVendor Advisory