# Color Iccdev


- [CVE-2026-21675](https://insights.sbomify.com/CVE-2026-21675/): iccDEV has a Use After Free vulnerability in CIccCmm class via improper hint manager object deletion (critical 9.8)
- [CVE-2026-24405](https://insights.sbomify.com/CVE-2026-24405/): iccDEV has Heap Buffer Overflow in CIccMpeCalculator::Read() (high 8.8)
- [CVE-2026-24406](https://insights.sbomify.com/CVE-2026-24406/): iccDEV has Heap Buffer Overflow in CIccTagNamedColor2::SetSize() (high 8.8)
- [CVE-2026-24412](https://insights.sbomify.com/CVE-2026-24412/): iccDEV has Heap Buffer Overflow in icCurvesFromXml() (high 8.8)
- [CVE-2026-22861](https://insights.sbomify.com/CVE-2026-22861/): iccDEV has a heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp (high 8.8)
- [CVE-2026-22255](https://insights.sbomify.com/CVE-2026-22255/): iccDEV has heap-buffer-overflow in CIccCLUT::Init() at IccProfLib/IccTagLut.cpp (high 8.8)
- [CVE-2026-21679](https://insights.sbomify.com/CVE-2026-21679/): iccDEV has heap-buffer-overflow vulnerability in CIccLocalizedUnicode::GetText() (high 8.8)
- [CVE-2026-21682](https://insights.sbomify.com/CVE-2026-21682/): iccDEV has heap-buffer-overflow in CIccXmlArrayType::ParseText() (high 8.8)
- [CVE-2026-21683](https://insights.sbomify.com/CVE-2026-21683/): iccDEV has Type Confusion in icStatusCMM::CIccEvalCompare::EvaluateProfile() (high 8.8)
- [CVE-2026-21688](https://insights.sbomify.com/CVE-2026-21688/): iccDEV has Type Confusion in SIccCalcOp::ArgsPushed() at IccProfLib/IccMpeCalc.cpp (high 8.8)
- [CVE-2026-21692](https://insights.sbomify.com/CVE-2026-21692/): iccDEV has Type Confusion in ToXmlCurve() at IccXML/IccLibXML/IccMpeXml.cpp (high 8.8)
- [CVE-2026-21693](https://insights.sbomify.com/CVE-2026-21693/): iccDEV has Type Confusion in CIccSegmentedCurveXml::ToXml() at IccXML/IccLibXML/IccMpeXml.cpp (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/color/iccdev/