CVE-2026-21689 | InternationalColorConsortium iccDEV up to 2.3.1.2 ICC Color Profile IccProfileXml.cpp ParseBasic input validation

A vulnerability was found in InternationalColorConsortium iccDEV up to 2.3.1.2 and classified as problematic. This vulnerability affects the function CIccProfileXml::ParseBasic of the file IccXML/IccLibXML/IccProfileXml.cpp of the component ICC Color Profile Handler. Such manipulation leads to improper input validation.

This vulnerability is referenced as CVE-2026-21689. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.