PT-2026-21911 · Iccdev · Iccdev

Sy460129 · Publicado 2026-02-25 · Atualizado 2026-02-25 · CVE-2026-27691

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.5

Description iccDEV is a set of libraries and tools for working with ICC color management profiles. A signed integer overflow in the iccFromCube.cpp file during multiplication can lead to undefined behavior, potentially causing crashes or incorrect ICC profile generation when processing specially crafted or large cube inputs. The issue is addressed by commit 43ae18dd69fc70190d3632a18a3af2f3da1e052a.

Recommendations Update to a version later than 2.3.1.4.

Exploit

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

CWE-681

Identificadores relacionados

CVE-2026-27691

GHSA-4GFJ-4CJH-53V5

Produtos afetados

Iccdev

Referências · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27691.json · Exploit
• 🔥 https://github.com/InternationalColorConsortium/iccDEV/issues/607 · Exploit
• https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-4gfj-4cjh-53v5 · Aviso do Fabricante
• https://github.com/InternationalColorConsortium/iccDEV/pull/611 · Correção
• https://github.com/InternationalColorConsortium/iccDEV/commit/43ae18dd69fc70190d3632a18a3af2f3da1e052a · Correção
• https://osv.dev/vulnerability/CVE-2026-27691 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-27691 · Nota de Segurança
• https://twitter.com/CVEnew/status/2026676412846051707 · Publicação no Twitter