VULNERABILITY INTELLIGENCE
CVE-2026-21499
CVSS score5.5 MEDIUM
EPSS probability0.19%
CISA KEVNot currently listed
Published2026-01-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Description
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the XML parser. This issue has been patched in version 2.3.1.2.
Weakness classification
- security-advisories@github.com: CWE-20
- nvd@nist.gov: CWE-476
Primary references
- security-advisories@github.com — Product
- security-advisories@github.com — Patch
- security-advisories@github.com — Patch
- security-advisories@github.com — Exploit, Issue Tracking
- security-advisories@github.com — Issue Tracking
- security-advisories@github.com — Third Party Advisory