CVE-2026-34547 in InternationalColorConsortium iccDEV

Summary

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, an Undefined Behavior (UB) condition in IccUtil.cpp can be triggered by a crafted ICC profile when running iccDumpProfile. This issue has been patched in version 2.3.1.6.

Responsible

GitHub_M

Reservation

03/30/2026

Disclosure

04/01/2026

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
354518	InternationalColorConsortium iccDEV ICC Color Profile IccUtil.cpp reliance on undefined, unspecified, or implementation-defined behavior	758	Not defined	Official fix	CVE-2026-34547