CVE-2026-21675

iccDEV contains a Use After Free vulnerability in CIccXform::Create(), where the hint manager is deleted improperly. Affected versions are 2.3.1 and earlier; the issue is fixed in 2.3.1.1. This affects the iccDEV color-management library and could enable exploitation through improper object clean...

CVE-2026-21675 iccDEV has a Use After Free vulnerability in CIccCmm class via improper hint manager object deletion

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a Use After Free vulnerability in the CIccXform::Create function, where it deletes the hint. This issue is fixed in version 2.3.1.1...