CVE-2026-34546

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted TIFF input can trigger Undefined Behavior (UB) due to division by zero in the TIFF handling code paths used by iccTiffDump. This issue has been patched in version 2.3.1.6.

Scoring

Severity

MEDIUM

CVSS base score

6.2

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS probability

0.16%

CWE

CWE-369

Published

2026-03-31

Last modified

2026-03-31

Affected products

• InternationalColorConsortium iccDEV

Weakness type

• CWE-369

Related vulnerabilities

• CVE-2026-6244 — division by zero in libpcap before 1.10.7
• CVE-2026-85458 — Divide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyph
• CVE-2026-16897 — Vulnerabilities in IBM AIX and PowerVM VIOS
• CVE-2026-63117 — FreeRDP: Denial of service through ADPCM frame size calculation
• CVE-2026-64951 — Velociraptor DoS triggered by Divide by Zero panic
• CVE-2026-17535 — Velociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS Volumes
• CVE-2026-19025 — HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset open
• CVE-2026-67302 — FreeRDP rdpecam StartStreamsRequest divide-by-zero denial of service

Markdown version · Browse all CVEs