CVE-2026-21673

HIGH

Color Iccdev < 2.3.1.1 - Integer Overflow

Title source: rule

Description

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have overflows and underflows in CIccXmlArrayType::ParseTextCountNum(). This vulnerability affects users of the iccDEV library who process ICC color profiles. This issue is fixed in version 2.3.1.1.

References (3)

Scores

CVSS v3 7.8
EPSS 0.0002
EPSS Percentile 3.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-190 CWE-681 CWE-704
Status published

Affected Products (1)

color/iccdev < 2.3.1.1

Timeline

Published Jan 06, 2026
Tracked Since Feb 18, 2026