PT-2026-21911 · Iccdev · Iccdev

Sy460129 · Published 2026-02-25 · Updated 2026-02-25 · CVE-2026-27691

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.5

Description iccDEV is a set of libraries and tools for working with ICC color management profiles. A signed integer overflow in the iccFromCube.cpp file during multiplication can lead to undefined behavior, potentially causing crashes or incorrect ICC profile generation when processing specially crafted or large cube inputs. The issue is addressed by commit 43ae18dd69fc70190d3632a18a3af2f3da1e052a.

Recommendations Update to a version later than 2.3.1.4.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

CWE-681

Related Identifiers

CVE-2026-27691

GHSA-4GFJ-4CJH-53V5

Affected Products

Iccdev

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27691.json · Exploit
• 🔥 https://github.com/InternationalColorConsortium/iccDEV/issues/607 · Exploit
• https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-4gfj-4cjh-53v5 · Vendor Advisory
• https://github.com/InternationalColorConsortium/iccDEV/pull/611 · Patch
• https://github.com/InternationalColorConsortium/iccDEV/commit/43ae18dd69fc70190d3632a18a3af2f3da1e052a · Patch
• https://osv.dev/vulnerability/CVE-2026-27691 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27691 · Security Note
• https://twitter.com/CVEnew/status/2026676412846051707 · Twitter Post