Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-21688

Опубликовано: 07 янв. 2026
Источник: nvd
CVSS3: 8.8
EPSS Низкий

Описание

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in SIccCalcOp::ArgsPushed() at IccProfLib/IccMpeCalc.cpp. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*
Версия до 2.3.1.2 (исключая)

EPSS

Процентиль: 29%
0.00104
Низкий

8.8 High

CVSS3

Дефекты

CWE-20

EPSS

Процентиль: 29%
0.00104
Низкий

8.8 High

CVSS3

Дефекты

CWE-20