1. Home
  2. CVE Database
  3. CVE-2026-21493
MEDIUM · 6.6

CVE-2026-21493

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are vulnerable to Type Confusion in its CIccSingleSampledeCurveXml class during ...

Vulnerability Description

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are vulnerable to Type Confusion in its CIccSingleSampledeCurveXml class during XML Curve Serialization. This issue is fixed in version 2.3.1.2.

CVSS Score

6.6

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
HIGH

Affected Products

VendorProductVersions
ColorIccdev< 2.3.1.2

Related Weaknesses (CWE)

CWE-188CWE-703CWE-843

References

FAQ

What is CVE-2026-21493?

CVE-2026-21493 is a vulnerability with a CVSS score of 6.6 (MEDIUM). iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are vulnerable to Type Confusion in its CIccSingleSampledeCurveXml class during ...

How severe is CVE-2026-21493?

CVE-2026-21493 has been rated MEDIUM with a CVSS base score of 6.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-21493?

Check the references section above for vendor advisories and patch information. Affected products include: Color Iccdev.