CVE-2026-21675 — iccDEV has a Use After Free vulnerability in CIccCmm class via improper hint manager object deletion
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a Use After Free vulnerability in the CIccXform::Cr…
Published: 2026-01-06 · CVSS: 9.8 · CVSS 3.1
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a Use After Free vulnerability in the CIccXform::Create() function, where it deletes the hint. This issue is fixed in version 2.3.1.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7