CVE-2026-34539: iccDEV: HBO in CTiffImg::WriteLine()
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile and TIFF input can trigger a heap-buffer-overflow (HBO) in CTiffImg::WriteLine(). The issue is observable under AddressSanitizer as an out-of-bounds heap read when running iccSpecSepToTiff on a malicious .icc + .tif pair, leading to a crash during TIFF strip writing. This issue has been patched in version 2.3.1.6.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-34539?
CVE-2026-34539 is classified as a high severity vulnerability due to the potential for exploitation through heap-buffer overflow.
How do I fix CVE-2026-34539?
To fix CVE-2026-34539, update to version 2.3.1.6 of the iccDEV library or later.
What causes the vulnerability CVE-2026-34539?
CVE-2026-34539 is caused by a crafted ICC profile and TIFF input that trigger a heap-buffer overflow in the CTiffImg::WriteLine() function.
What software is affected by CVE-2026-34539?
CVE-2026-34539 affects the iccDEV library versions prior to 2.3.1.6.
Can CVE-2026-34539 be exploited remotely?
Yes, CVE-2026-34539 can potentially be exploited remotely through specially crafted input files.