CVE-2026-34537 in InternationalColorConsortium iccDEV
要約 (英語)
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger Undefined Behavior (UB) in CIccOpDefEnvVar::Exec() due to invalid enum values being loaded for icSigCmmEnvVar. The issue is observable under UBSan as a “load of value … not a valid value for type icSigCmmEnvVar”, indicating an invalid enum/type value being consumed during ICC profile processing. This issue has been patched in version 2.3.1.6.
責任者
GitHub_M
予約する
2026年03月30日
公開
2026年04月01日
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 354571 | InternationalColorConsortium iccDEV ICC Color Profile Exec サービス拒否 | 758 | 未定義 | 公式な修正 | CVE-2026-34537 |