CVE-2026-34551: iccDEV: NPD in CIccTagLut16::Write()
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a null-pointer dereference (NPD) in CIccTagLut16::Write() can be triggered when processing a crafted ICC profile (embedded in a TIFF and extracted during iccTiffDump). This issue has been patched in version 2.3.1.6.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-34551?
CVE-2026-34551 is considered a medium severity vulnerability due to its potential for causing application crashes.
How do I fix CVE-2026-34551?
To fix CVE-2026-34551, update iccDEV to version 2.3.1.6 or later.
What type of vulnerability is CVE-2026-34551?
CVE-2026-34551 is a null-pointer dereference vulnerability affecting the CIccTagLut16::Write() function.
Can CVE-2026-34551 be exploited remotely?
Yes, CVE-2026-34551 can potentially be exploited remotely when processing specially crafted ICC profiles.
In which software is CVE-2026-34551 found?
CVE-2026-34551 is found in iccDEV versions prior to 2.3.1.6.