Stack Buffer Overflow in iccDEV Libraries Affecting Color Management Tools
CVE-2026-34555

6.2MEDIUM

Key Information:

Vendor: Internationalcolorconsortium
Status: Iccdev
Vendor: CVE Published:; 31 March 2026

🔔 Create Internationalcolorconsortium Vulnerability Alert

What is CVE-2026-34555?

A stack buffer overflow vulnerability exists in the iccDEV libraries, specifically within the function CIccTagFixedNum<>::GetValues(). This issue can lead to an overflow of a 4-byte stack variable during library operations involving ICC color management profiles. The vulnerability has been addressed in version 2.3.1.6, and users are encouraged to upgrade to mitigate potential risks associated with this flaw.