CVE-2026-21691
Type Confusion in iccDEV ICC Profile Processing Library
Publication date: 2026-01-07
Last updated on: 2026-01-07
Assigner: GitHub, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| iccdev | iccdev | to 2.3.1.2 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-697 | The product compares two entities in a security-relevant context, but the comparison is incorrect. |
| CWE-20 | The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. |
| CWE-476 | The product dereferences a pointer that it expects to be valid but is NULL. |
| CWE-1025 | The code performs a comparison between two entities, but the comparison examines the wrong factors or characteristics of the entities, which can lead to incorrect results and resultant weaknesses. |
| CWE-140 | The product does not neutralize or incorrectly neutralizes delimiters. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a Type Confusion issue in the iccDEV library, specifically in the function CIccTag:IsTypeCompressed(). It affects versions prior to 2.3.1.2 and involves incorrect handling of ICC color profiles, which can lead to unexpected behavior or errors when processing these profiles.
How can this vulnerability impact me? :
The vulnerability can impact users by causing integrity and availability issues when processing ICC color profiles. An attacker could exploit this to cause a denial of service or manipulate the processing of color profiles, potentially leading to application crashes or incorrect color management results.
What immediate steps should I take to mitigate this vulnerability?
Upgrade the iccDEV library to version 2.3.1.2 or later, as this version contains the patch for the Type Confusion vulnerability in CIccTag:IsTypeCompressed(). No known workarounds are available.