cvedb.io
CVE-2026-34547
MEDIUM · CVSS 6.2
EPSS exploitation probability: 0%
Published 2026-03-31T23:17:09.450 · Last modified 2026-06-17T10:39:12.860

Summary

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, an Undefined Behavior (UB) condition in IccUtil.cpp can be triggered by a crafted ICC profile when running iccDumpProfile. This issue has been patched in version 2.3.1.6.

Affected products

color — iccdev

Does this affect you?

Add your gear to cvedb and we'll alert you only when color ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.