Iccdev CVE-2026-34555

CVSS vector AV:L/AC:L/PR:N/UI:N indicates a local attack requiring no privileges and no user interaction, but the attack complexity is low and automation is feasible for local code execution contexts. CVSS score of 6.2 reflects high availability impact (A:H) with no confidentiality or integrity impact in the base vector. The denial-of-service nature limits real-world severity compared to remote code execution vulnerabilities; however, in supply-chain or multi-tenant environments where untrusted ICC profiles are processed by local services, this could facilitate lateral movement or service disruption. The lack of any public exploit code, KEV status, or reports of active exploitation, combined with straightforward patch availability, suggests this is a manageable vulnerability where applied remediation significantly reduces risk. In terms of prioritization: organizations heavily reliant on automated ICC profile processing should prioritize patching, while desktop-only deployments face lower immediate risk.

An attacker with local system access crafts a malicious ICC color profile file containing specially structured numeric tag data that triggers the buffer overflow in CIccTagFixedNum<>::GetValues(). When a local service or application (such as image processing middleware or color management daemon) parses the malicious profile without input validation, the stack buffer overflows, corrupting adjacent memory and causing the process to crash. This scenario is most likely in multi-user systems where untrusted users can place crafted profiles in shared directories, or in server environments that automatically process uploaded ICC profiles. No public proof-of-concept code has been identified, and the attack requires local file system access or ability to influence file input to the vulnerable parsing function.