CVE-2026-21675
CriticalSummary
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a Use After Free vulnerability in the CIccXform::Create() function, where it deletes the hint. This issue is fixed in version 2.3.1.1.
Risk Assessment
The vulnerability may lead to program malfunction, crashes, or potentially arbitrary code execution in the context of the application using the library.
Recommendation
It is recommended to update to version 2.3.1.1 or later to eliminate the risk.
Original NVD description (English source)
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a Use After Free vulnerability in the CIccXform::Create() function, where it deletes the hint. This issue is fixed in version 2.3.1.1.