CVE-2026-21505: iccDEV has Undefined Behavior (UB) - Invalid Enum Value
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV has undefined behavior due to an invalid enum value. This issue has been patched in version 2.3.1.2.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-21505?
CVE-2026-21505 is classified as having a moderate severity due to its potential to cause undefined behavior.
How do I fix CVE-2026-21505?
To fix CVE-2026-21505, upgrade to version 2.3.1.2 or later of the iccDEV software.
What versions of iccDEV are affected by CVE-2026-21505?
CVE-2026-21505 affects all versions of iccDEV prior to version 2.3.1.2.
What is the impact of CVE-2026-21505 on users?
The impact of CVE-2026-21505 may lead to unexpected application behavior and could compromise the integrity of color management processes.
Who is the vendor for CVE-2026-21505?
The vendor for CVE-2026-21505 is iccDEV, which develops software for ICC color management.