PT-2026-2064 · Iccdev · Iccdev

Xsscx · CVE-2026-21498 · Publicado 2026-01-07 · Atualizado 2026-01-07

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2

Description iccDEV is a set of libraries and tools for interacting with ICC color management profiles. A NULL pointer dereference issue exists in the XML calculator parser in versions prior to 2.3.1.2.

Recommendations Update to iccDEV version 2.3.1.2 or later.

Exploit

Correção

NULL Pointer Dereference

Unchecked Return Value

RCE

Enumeração de Fraquezas

CWE-476

CWE-252

CWE-20

CWE-690

Identificadores relacionados

CVE-2026-21498

GHSA-6822-QVXQ-M736

Produtos afetados

Iccdev

Referências · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/21xxx/CVE-2026-21498.json · Exploit
• 🔥 https://github.com/InternationalColorConsortium/iccDEV/issues/375 · Exploit
• https://github.com/InternationalColorConsortium/iccDEV/pull/404 · Nota
• https://github.com/InternationalColorConsortium/iccDEV/commit/75f124f40ba45491211cb4b67f0e05b7c7d59553 · Correção
• https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-6822-qvxq-m736 · Nota
• https://github.com/InternationalColorConsortium/iccDEV/commit/bdfa31940726aaabb0a6f19194d9062ba0598959 · Correção
• https://osv.dev/vulnerability/CVE-2026-21498 · Aviso do Fabricante
• https://t.me/CVEtracker/41620 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2008959517804085637 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-21498 · Nota de Segurança