CVE-2026-34547
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, an Undefined Behavior (UB) condition in IccUtil.cpp can be triggered by a crafted ICC profile when running iccDumpProfile. This issue has been patched in version 2.3.1.6.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.2
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS probability
- 0.16%
- CWE
- CWE-758
- Published
- 2026-03-31
- Last modified
- 2026-04-01
Affected products
- InternationalColorConsortium iccDEV
Weakness type
Related vulnerabilities
- CVE-2026-16441 — Eclipse OpenJ9 : Method resolution default method precedence failure
- CVE-2026-50185 — RustCrypto Cmov/CmovEq on aarch64 can produce wrong results if high-bits of registers are set
- CVE-2024-58350 — Ghidra < 11.2 - Use After Free in Sleigh Backend via Static Initialization Order
- CVE-2026-40279 — BACnet Stack: Undefined-behavior signed left shift in `decode_signed32()`
- CVE-2026-34549 — iccDEV: UB at IccUtil.cpp
- CVE-2026-34537 — iccDEV: UB in CIccOpDefEnvVar::Exec()
- CVE-2026-34533 — iccDEV: UB in CIccCalculatorFunc::ApplySequence()
- CVE-2026-28528 — BlueKitchen BTstack < 1.8.1 AVRCP Browsing Target GET_FOLDER_ITEMS Handler OOB Read / Undefined Behavior