← Database

CVE-2026-21675

CRITICAL CVSS: 9.8 Published: 2026-01-06 Modified: 2026-06-17

Description

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a Use After Free vulnerability in the CIccXform::Create() function, where it deletes the hint. This issue is fixed in version 2.3.1.1.

Affected Platforms

Color Iccdev

Weakness Type

CWE-20, CWE-416

References