CVE-2026-34555 MEDIUM

CVE-2026-34555: iccDEV: SBO in CIccTagFixedNum::GetValues()

Vendor Internationalcolorconsortium
Product iccDEV
Weakness CWE-121
Published March 31, 2026
Last update April 1, 2026
View on NVD All CVEs

CVSS base score

6.2/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a stack-buffer-overflow (SBO) in CIccTagFixedNum<>::GetValues() and a related bug chain. The primary crash is an AddressSanitizer-reported WRITE of size 4 that overflows a 4-byte stack variable (rv) via the call chain CIccTagFixedNum::GetValues() -> CIccTagStruct::GetElemNumberValue(). This issue has been patched in version 2.3.1.6.

Key dates

02Disclosure timeline

March 31, 2026 CVE published
April 1, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-14135 Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so AP_get_wired_clientlist_setClientsName stack-based overflow CVE-2021-1206 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities CVE-2026-4490 Tenda A18 Pro openSchedWifi setSchedWifi stack-based overflow CVE-2021-43983 WECON LeviStudioU CVE-2025-4471 code-projects Jewelery Store Management system Search Item View stack-based overflow