CVE-2026-34546: iccDEV: UB at TiffImg.h
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted TIFF input can trigger Undefined Behavior (UB) due to division by zero in the TIFF handling code paths used by iccTiffDump. This issue has been patched in version 2.3.1.6.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-34546?
CVE-2026-34546 is classified as a medium severity vulnerability due to the potential for undefined behavior from crafted TIFF inputs.
How do I fix CVE-2026-34546?
To fix CVE-2026-34546, upgrade iccDEV to version 2.3.1.6 or later.
What type of vulnerability is CVE-2026-34546?
CVE-2026-34546 is categorized as an Undefined Behavior (UB) vulnerability that can occur in the TIFF handling code of iccDEV.
What components are affected by CVE-2026-34546?
CVE-2026-34546 affects all versions of iccDEV prior to 2.3.1.6.
What can exploit CVE-2026-34546?
A crafted TIFF file can exploit CVE-2026-34546, leading to undesirable effects in the processing of the image.