Iccdev
CVE-2026-34546
MEDIUM
Severity by source
AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from GitHub Advisory · only source for this CVE.
CVSS VectorGitHub Advisory
Lifecycle Timeline
2DescriptionGitHub Advisory
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted TIFF input can trigger Undefined Behavior (UB) due to division by zero in the TIFF handling code paths used by iccTiffDump. This issue has been patched in version 2.3.1.6.
AnalysisAI
Denial of service via division by zero in iccDEV prior to version 2.3.1.6 allows local attackers to crash the iccTiffDump utility by supplying a crafted TIFF file, resulting in undefined behavior and availability impact. The vulnerability requires local file access and no authentication, but exploitation is limited to denial of service rather than code execution or information disclosure. CVSS 6.2 reflects medium severity with high availability impact; no public exploitation or CISA KEV status reported.
Technical ContextAI
iccDEV is the reference implementation library for the International Color Consortium (ICC) color profile specification, providing tools to parse and manipulate TIFF image files with embedded ICC color profiles. The vulnerability resides in CWE-369 (Divide By Zero), a numeric error condition where untrusted input from a malformed TIFF file reaches a division operation without proper validation. The iccTiffDump utility specifically processes TIFF headers and color profile data; a crafted TIFF can contain zero or invalid values in fields expected to be divisors (likely in image dimension, resolution, or color component calculations), triggering undefined behavior in C/C++ code. The affected product is identified by CPE cpe:2.3:a:internationalcolorconsortium:iccdev:*:*:*:*:*:*:*:* (all versions before 2.3.1.6).
RemediationAI
Vendor-released patch: iccDEV version 2.3.1.6 or later. Users should update immediately by upgrading to the patched release available at https://github.com/InternationalColorConsortium/iccDEV/releases. The upstream fix is documented in GitHub issue #719 and pull request #723 (https://github.com/InternationalColorConsortium/iccDEV/pull/723); review PR #723 for implementation details on division-by-zero validation. Until patching is complete, mitigate by avoiding processing untrusted or user-supplied TIFF files with iccTiffDump and by restricting iccDEV tool execution to trusted, validated inputs. For applications embedding iccDEV, coordinate with upstream maintainers for patched library releases.
iccDEV ICC color profile library (through 2.3.1) has a use-after-free in CIccXform::Create() when processing hint object
Heap buffer overflow in iccDEV versions 2.3.1.1 and below allows remote code execution through maliciously crafted ICC c
Heap buffer overflow in iccDEV versions 2.3.1.1 and below allows remote code execution when processing maliciously craft
Heap buffer overflow in iccDEV versions 2.3.1.1 and earlier allows remote code execution through maliciously crafted ICC
Type confusion in iccDEV library versions before 2.3.1.2 allows unauthenticated attackers to achieve remote code executi
iccDEV color management library versions 2.3.1 and earlier contain undefined behavior in the CLUT initialization functio
iccDEV ICC color profile libraries versions 2.3.1.1 and earlier suffer from undefined behavior and out-of-memory errors
Heap buffer overflow in iccDEV versions before 2.3.1.2 allows remote code execution when processing malicious ICC color
Type confusion in iccDEV versions before 2.3.1.2 allows attackers to corrupt memory and achieve high-impact outcomes inc
Type confusion in iccDEV versions before 2.3.1.2 allows unauthenticated attackers to achieve remote code execution throu
Heap buffer overflow in iccDEV versions before 2.3.1.2 allows remote code execution when processing malicious ICC color
Heap buffer overflow in iccDEV versions prior to 2.3.1.2 allows remote attackers to execute arbitrary code through the C
Same weakness CWE-369 – Divide By Zero
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today