CVE-2026-21492CWE-252CWE-476

iccDEV ToneMap Writer has NULL Pointer Member Call

Medium · published January 6, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
8.8
In the wild
Unconfirmed
What it is

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a NULL pointer member call vulnerability. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00196 · 8.8th percentile
Weaknesses
CWE-252 · Unchecked Return Value; CWE-476 · NULL Pointer Dereference
Published
2026-01-06T20:23Z
EPSS history
Timeline
  • 06 JAN 20:23Z
    iccDEV ToneMap Writer has NULL Pointer Member Call
    cvelistv5