CVE-2026-21489 | InternationalColorConsortium iccDEV up to 2.3.1.1/2.3.1.2 SequenceNeedTempReset out-of-bounds (GHSA-ph89-6q5h-wfw5)

A vulnerability was found in InternationalColorConsortium iccDEV up to 2.3.1.1/2.3.1.2. It has been classified as critical. The impacted element is the function CIccCalculatorFunc::SequenceNeedTempReset. Performing a manipulation results in out-of-bounds read.

This vulnerability is reported as CVE-2026-21489. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.