PT-2026-2061 · Iccdev · Iccdev

Xsscx · Published 2026-01-07 · Updated 2026-01-08 · CVE-2026-21495

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2

Description iccDEV is a set of libraries and tools used for interacting with, manipulating, and applying ICC color management profiles. A division by zero flaw exists in the TIFF Image Reader component in versions prior to 2.3.1.2.

Recommendations Update to iccDEV version 2.3.1.2 or later.

Exploit

Fix

Divide By Zero

RCE

Weakness Enumeration

CWE-369

CWE-20

Related Identifiers

CVE-2026-21495

GHSA-XHRM-79RG-5784

Affected Products

Iccdev

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/21xxx/CVE-2026-21495.json · Exploit
• https://github.com/InternationalColorConsortium/iccDEV/commit/10c34179a0332a869c2b46e305a9cd23a6311dfe · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-21495 · Security Note
• https://osv.dev/vulnerability/CVE-2026-21495 · Vendor Advisory
• https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-xhrm-79rg-5784 · Note
• https://twitter.com/VulmonFeeds/status/2009108997178081487 · Twitter Post
• https://t.me/CVEtracker/41617 · Telegram Post
• https://twitter.com/CVEnew/status/2008959521658687733 · Twitter Post