Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a stack-buffer-overflow (SBO) in CIccTagFixedNum<>::GetValues() and a related bug chain. The primary crash is an AddressSanitizer-reported WRITE of size 4 that overflows a 4-byte stack variable (rv) via the call chain CIccTagFixedNum::GetValues() -> CIccTagStruct::GetElemNumberValue(). This issue has been patched in version 2.3.1.6.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-34555 iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a stack-buffer-overflow (SBO) in CIccT… https://www.cve.org/CVERecord?id=CVE-2026-34555
Post summary
The post announces that CVE-2026-34555, a stack-buffer-overflow in iccDEV before version 2.3.1.6, has been identified and fixed in the listed update.
🚨*CVE* CVE-2026-34555 iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a stack-buffer-overflow (SBO) in CIccT… https://www.cve.org/CVERecord?id=CVE-2026-34555 ----- Traducción: CVE-2026-34555 icc… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑34555, noting a stack‑buffer‑overflow in iccDEV’s CIccT before version 2.3.1.6, with no mention of exploits, patches, or active use.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | color | iccdev | - | - | - |