Skip to content
CVE PROGRAM SOURCE RECORD6.2 Medium

CVE-2026-34551

iccDEV: NPD in CIccTagLut16::Write()

Description

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a null-pointer dereference (NPD) in CIccTagLut16::Write() can be triggered when processing a crafted ICC profile (embedded in a TIFF and extracted during iccTiffDump). This issue has been patched in version 2.3.1.6.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

InternationalColorConsortium iccDEV

  • < 2.3.1.6affected

References