medium6.2
CVE-2026-34551
iccDEV provides a set of libraries and tools for working with ICC color management profiles.
Impact
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a null-pointer dereference (NPD) in CIccTagLut16::Write() can be triggered when processing a crafted ICC profile (embedded in a TIFF and extracted during iccTiffDump). This issue has been patched in version 2.3.1.6.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Color | Iccdev | before 2.3.1.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/InternationalColorConsortium/iccDEV/issues/702
- https://github.com/InternationalColorConsortium/iccDEV/pull/728
- https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-jmx9-9xmx-g57h
- https://github.com/InternationalColorConsortium/iccDEV/issues/702