Undefined Behavior in iccDEV Color Management Tools

CVE-2026-34550

What is CVE-2026-34550?

The iccDEV library, utilized for ICC color management profiles, previously contained a flaw resulting from an implicit conversion of a negative signed integer to an unsigned size_t, creating an Undefined Behavior condition in IccProfLib/IccIO.cpp. This issue potentially leads to erroneous behavior during execution. It has been addressed in version 2.3.1.6, and users are encouraged to update to this version to safeguard against potential disruptions.

References