CVE-2026-21486 | InternationalColorConsortium iccDEV up to 2.3.1.1/2.3.1.2 CIccSparseMatrix heap-based overflow (GHSA-mg98-j5q2-674w)

A vulnerability identified as critical has been detected in InternationalColorConsortium iccDEV up to 2.3.1.1/2.3.1.2. This affects the function CIccSparseMatrix::CIccSparseMatrix. The manipulation leads to heap-based buffer overflow.

This vulnerability is uniquely identified as CVE-2026-21486. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.