CVE-2026-34551 in InternationalColorConsortium iccDEV
Zusammenfassung (Englisch)
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a null-pointer dereference (NPD) in CIccTagLut16::Write() can be triggered when processing a crafted ICC profile (embedded in a TIFF and extracted during iccTiffDump). This issue has been patched in version 2.3.1.6.
Zuständig
GitHub_M
Reservieren
30.03.2026
Veröffentlichung
01.04.2026
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 354563 | InternationalColorConsortium iccDEV ICC Color Profile Write Denial of Service | 476 | Nicht definiert | Offizieller Fix | CVE-2026-34551 |