PT-2026-1362 · Iccdev · Iccdev

Xsscx · Published 2026-01-06 · Updated 2026-01-07 · CVE-2026-21507

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.1

Description iccDEV is a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain an infinite loop within the CalcProfileID function in the IccProfile.cpp file. This issue is addressed in version 2.3.1.1.

Recommendations Update to version 2.3.1.1 or later.

Exploit

Fix

DoS

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

CVE-2026-21507

GHSA-HGP5-R8M9-8QPJ

Affected Products

Iccdev

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/21xxx/CVE-2026-21507.json · Exploit
• https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-hgp5-r8m9-8qpj · Vendor Advisory
• https://github.com/InternationalColorConsortium/iccDEV/commit/3f3ce789d0d2b608c194ed172fa38943519dc198 · Patch
• https://github.com/InternationalColorConsortium/iccDEV/issues/244 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-21507 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-21507 · Security Note
• https://twitter.com/CCBalert/status/2008823851052867897 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2008364001013453206 · Twitter Post
• https://t.me/CVEtracker/41455 · Telegram Post