LUT Iteration Logic Flaw in ICC Color Management Tool by International Color Consortium
CVE-2026-34553

4MEDIUM

Key Information:

Vendor: Internationalcolorconsortium
Status: Iccdev
Vendor: CVE Published:; 31 March 2026

🔔 Create Internationalcolorconsortium Vulnerability Alert

What is CVE-2026-34553?

A defect in the LUT iteration logic within ICC color management tools can lead to improper handling of inputs during CIccCLUT::Iterate() operations, and may compromise the output generated by CIccMBB::Describe(). This vulnerability affects versions prior to 2.3.1.6 of the iccDEV library. Users are advised to upgrade to the latest version to mitigate any potential risks. For further details, please refer to the advisories and issue links provided.