CVE-2026-21681CWE-20

iccDEV has Undefined Behavior runtime error: nan is outside the range .. IccProfLib/IccTagBasic.cpp

High · published January 7, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
10.8
In the wild
Unconfirmed
What it is

⚡ An undefined behavior runtime error is lurking in versions of iccDEV prior to 2.3.1.2, and it could cause some colorful chaos! Think of it like a painter's palette gone wrong; if the colors mix unpredictably, the final artwork could end up looking like a complete mess. This vulnerability can trigger unexpected behaviors when processing ICC color profiles, leading to potential system instabilities. An attacker could exploit this error to disrupt processes that rely on the iccDEV library, possibly causing application crashes or unpredictable behavior. It's a high-stakes gamble that could leave your color management processes in disarray, leading to production issues or data integrity problems if left unaddressed.

Put simply

Think of it like a painter's palette gone wrong; if the colors mix unpredictably, the final artwork could end up looking like a complete mess. This vulnerability can trigger unexpected behaviors when processing ICC color profiles, leading to potential system instabilities. This vulnerability in iccDEV results in undefined behavior when handling ICC color profiles, meaning it can cause crashes or unpredictable outcomes, compromising the stability of applications using the library.

What to do

An attacker could exploit this error to disrupt processes that rely on the iccDEV library, possibly causing application crashes or unpredictable behavior. It's a high-stakes gamble that could leave your color management processes in disarray, leading to production issues or data integrity problems if left unaddressed. To protect yourself, upgrade to iccDEV version 2.3.1.2 immediately. This version contains a patch that fixes the runtime error, ensuring your applications handle color profiles smoothly and without risk. Regularly check for updates to stay secure! You've got this! Just follow these steps, and you'll have your color management locked down in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00211 · 10.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-01-07T20:48Z
EPSS history
Timeline
  • 07 JAN 20:48Z
    iccDEV has Undefined Behavior runtime error: nan is outside the range .. IccProfLib/IccTagBasic.cpp
    cvelistv5