CVE-2026-34553
Medium · 4.0CVSS
4.0
EPSS
0.2%
Published
Mar 31, 2026
CISA due date
—
The record
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a defect in LUT dump/iteration logic affecting CIccCLUT::Iterate() and output produced by CIccMBB::Describe() (via CLUT dumping). This issue has been patched in version 2.3.1.6.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-26399 A stack-use-after-return issue exists in the Arduino_Core_STM32 library prior to version… CWE-562
- CVE-2026-3591 A use-after-return vulnerability exists in the `named` server when handling DNS queries… CWE-562
- CVE-2024-4418 A race condition leading to a stack use-after-free flaw was found in libvirt. CWE-562
- CVE-2026-87616 Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36… CWE-665
- CVE-2026-78940 Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a… CWE-665
- CVE-2026-12233 The PSA Protected Storage credential backend (subsys/net/lib/tls_credentials/tls_credenti… CWE-665
- CVE-2026-54777 CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET… CWE-665
- CVE-2026-54409 A malicious actor with access to the network and under certain conditions could exploit… CWE-665