CVEvulnerability
CVE-2026-34546
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-03-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.2 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-369
Description
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted TIFF input can trigger Undefined Behavior (UB) due to division by zero in the TIFF handling code paths used by iccTiffDump. This issue has been patched in version 2.3.1.6.
Affected configurations
• color iccdev (< 2.3.1.6)
Related
Weakness · CWE (1)
- CWE-369 Divide By Zero weakness
References
- https://github.com/InternationalColorConsortium/iccDEV/issues/719 Exploit, Issue Tracking
- https://github.com/InternationalColorConsortium/iccDEV/pull/723 Issue Tracking, Patch
- https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-fxgq-wf5v-25pq Patch, Vendor Advisory