CVE-2026-21684

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have Undefined Behavior in `CIccTagSpectralViewingConditions()`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.

Published Jan 14, 2026

https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-fg9m-j9x8-8279

CVSS ScoreHigh

7.1

Ecosystem	Package	Version

Ecosystem	Package	Version

Vulnerabilities

CVE-2026-21684

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have Undefined Behavior in `CIccTagSpectralViewingConditions()`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.

Published Jan 14, 2026

https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-fg9m-j9x8-8279

CVSS ScoreHigh

7.1


npm	iccdev	2.2.120
npm	iccdev	2.2.121
npm	iccdev	2.2.122
npm	iccdev	2.2.123
npm	iccdev	2.2.124
npm	iccdev	2.2.125
npm	iccdev	2.2.126
npm	iccdev	2.2.128
npm	iccdev	2.2.129
npm	iccdev	2.2.131
npm	iccdev	2.2.132
npm	iccdev	2.2.133
npm	iccdev	2.2.134
npm	iccdev	2.2.135
npm	iccdev	2.2.136
npm	iccdev	2.2.137
npm	iccdev	2.2.138
npm	iccdev	2.2.139
npm	iccdev	2.2.140
npm	iccdev	2.2.141
npm	iccdev	2.2.142
npm	iccdev	2.2.143
npm	iccdev	2.2.144
npm	iccdev	2.2.145
npm	iccdev	2.2.146
npm	iccdev	2.2.147
npm	iccdev	2.2.148
npm	iccdev	2.2.149
npm	iccdev	2.2.150
npm	iccdev	2.2.151
npm	iccdev	2.2.152
npm	iccdev	2.2.153
npm	iccdev	2.2.154
npm	iccdev	2.2.61
npm	iccdev	2.3.1

Ecosystem	Package	Version


npm	iccdev	2.2.120
npm	iccdev	2.2.121
npm	iccdev	2.2.122
npm	iccdev	2.2.123
npm	iccdev	2.2.124
npm	iccdev	2.2.125
npm	iccdev	2.2.126
npm	iccdev	2.2.128
npm	iccdev	2.2.129
npm	iccdev	2.2.131
npm	iccdev	2.2.132
npm	iccdev	2.2.133
npm	iccdev	2.2.134
npm	iccdev	2.2.135
npm	iccdev	2.2.136
npm	iccdev	2.2.137
npm	iccdev	2.2.138
npm	iccdev	2.2.139
npm	iccdev	2.2.140
npm	iccdev	2.2.141
npm	iccdev	2.2.142
npm	iccdev	2.2.143
npm	iccdev	2.2.144
npm	iccdev	2.2.145
npm	iccdev	2.2.146
npm	iccdev	2.2.147
npm	iccdev	2.2.148
npm	iccdev	2.2.149
npm	iccdev	2.2.150
npm	iccdev	2.2.151
npm	iccdev	2.2.152
npm	iccdev	2.2.153
npm	iccdev	2.2.154
npm	iccdev	2.2.61
npm	iccdev	2.3.1

Find vulnerabilities. Fix fast with AI.

CVE-2026-21684

CVE-2026-21684