PT-2026-29391 · Iccdev · Iccdev

Chriscox · Published 2026-03-31 · Updated 2026-04-01 · CVE-2026-34546

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

iccDEV versions prior to 2.3.1.6

The iccDEV software, which includes libraries and tools for working with ICC color management profiles, is affected by an issue where a specially crafted TIFF input can cause Undefined Behavior (UB) due to division by zero in the TIFF handling code paths used by iccTiffDump.

Versions prior to 2.3.1.6 are affected.

Update to version 2.3.1.6 or later.

Exploit

Fix

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

CVE-2026-34546

GHSA-FXGQ-WF5V-25PQ

Affected Products

Iccdev

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34546.json · Exploit
• 🔥 https://github.com/InternationalColorConsortium/iccDEV/issues/719 · Exploit
• https://github.com/InternationalColorConsortium/iccDEV/pull/723 · Patch
• https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-fxgq-wf5v-25pq · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34546 · Security Note
• https://osv.dev/vulnerability/CVE-2026-34546 · Vendor Advisory
• https://twitter.com/infoflowcloud/status/2039281096584503596 · Twitter Post
• https://twitter.com/CVEnew/status/2039279729216524769 · Twitter Post