Cloudanix VulnDB

CVE-2026-21492

Medium · 5.5

CVSS

5.5

EPSS

0.2%

Published

Jan 6, 2026

CISA due date

—

The record

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a NULL pointer member call vulnerability. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.

Affected packages

Ecosystem Package Introduced Fixed