Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

iccDEV

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below have Out-of-bounds Read and Integer Underflow (Wrap or Wraparound) vulnerabilities in its CIccCalculatorFunc::SequenceNeedTempReset function. This issue is fixed in version 2.3.1.2.

CVE-2026-21489 is a vulnerability identified in the iccDEV library, which is widely used for handling ICC color management profiles in various imaging and color-critical applications. The flaw exists in versions 2.3.1.1 and earlier, specifically within the CIccCalculatorFunc::SequenceNeedTempReset function. It involves an out-of-bounds read (CWE-125) and an integer underflow (CWE-191), which can lead to improper memory access. These conditions arise when the function miscalculates buffer sizes or indices, causing it to read memory outside the intended bounds. The vulnerability requires local access (AV:L) and user interaction (UI:R) to be exploited, meaning an attacker must have some level of access to the system and trigger the vulnerable function, likely through crafted ICC profiles or related inputs. The impact primarily affects availability (A:H), as exploitation can cause application crashes or denial of service, while confidentiality impact is low (C:L) and integrity is not affected. The vulnerability has a CVSS 3.1 base score of 6.1, reflecting medium severity. No public exploits are known at this time, but the flaw poses a risk to systems processing ICC profiles, especially in environments where iccDEV is integrated into workflows for color management in printing, publishing, or graphic design. The issue is resolved in version 2.3.1.2, which corrects the bounds checking and integer calculations to prevent out-of-bounds reads and underflows.

Detailed information about CVE-2026-21489: CWE-125: Out-of-bounds Read in InternationalColorConsortium iccDEV affecting InternationalColorConsortium iccDEV. Get

CVE-2026-21489: CWE-125: Out-of-bounds Read in InternationalColorConsortium iccDEV - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-21489: CWE-125: Out-of-bounds Read in InternationalColorConsortium iccDEV

Threats Tagged 'cve-2026-21489'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-21489'

Lead Pen Test Professional