CVE-2026-21688

CVE-2026-21688 affects iccDEV prior to 2.3.1.2. A Type Confusion vulnerability exists in the SIccCalcOp::ArgsPushed() function located at IccProfLib/IccMpeCalc.cpp, impacting users processing ICC color profiles. The referenced patches/updates indicate a fix in version 2.3.1.2; no public workaroun...

CVE-2026-21688 iccDEV has Type Confusion in SIccCalcOp::ArgsPushed() at IccProfLib/IccMpeCalc.cpp

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in SIccCalcOp::ArgsPushed at IccProfLib/IccMpeCalc.cpp. This...