CVE-2026-21691
Medium · 5.4CVSS
5.4
EPSS
0.3%
Published
Jan 7, 2026
CISA due date
—
The record
iccDEV has Type Confusion in CIccTag:IsTypeCompressed()
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-78619 Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code… CWE-1025
- CVE-2026-75840 ArcadeDB before 26.8.1 contains an arbitrary file read vulnerability in the GraalVM… CWE-1025
- CVE-2026-9800 A flaw was found in Keycloak Policy Enforcer. CWE-1025
- CVE-2026-48860 Reliance on IP Address for Authentication vulnerability in Erlang/OTP ssl (inet_tls_dist… CWE-1025
- CVE-2026-40880 ZEBRA is a Zcash node written entirely in Rust. CWE-1025
- GHSA-xvj8-ph7x-65gf Zebra: Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip Blocks CWE-1025
- CVE-2026-40227 In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API… CWE-1025
- CVE-2026-6322 fast-uri normalize() decoded percent-encoded authority delimiters inside the host… CWE-140