CVE-2026-34536 iccDEV: SO in SIccCalcOp::ArgsUsed()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a stack overflow SO in SIccCalcOp::ArgsUsed. The issue is observable under AddressSanitizer as a stack-overflow when iccApplyProfiles processes ...

CVE-2026-34536

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a stack overflow SO in SIccCalcOp::ArgsUsed. The issue is observable under AddressSanitizer as a stack-overflow when iccApplyProfiles processes ...

CVE-2026-34535

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a segmentation fault SEGV in CIccTagArray::Cleanup. The issue is observable under UBSan/ASan as misaligned member access / misaligned pointer...

CVE-2026-34535 iccDEV: SEGV in CIccTagArray::Cleanup()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a segmentation fault SEGV in CIccTagArray::Cleanup. The issue is observable under UBSan/ASan as misaligned member access / misaligned pointer...

CVE-2026-34535

iccDEV is affected by CVE-2026-34535 prior to version 2.3.1.6. A crafted ICC profile can trigger a segmentation fault in CIccTagArray::Cleanup(), observable under UBSan/ASan as misaligned member access and misaligned pointer loads followed by an invalid read, causing a process crash when running ...

CVE-2026-34534 iccDEV: HBO in CIccMpeSpectralMatrix::Describe()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a heap-buffer-overflow HBO in CIccMpeSpectralMatrix::Describe. The issue is observable under AddressSanitizer as an out-of-bounds heap read when...

CVE-2026-34534 iccDEV: HBO in CIccMpeSpectralMatrix::Describe()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a heap-buffer-overflow HBO in CIccMpeSpectralMatrix::Describe. The issue is observable under AddressSanitizer as an out-of-bounds heap read when...

CVE-2026-34534

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a heap-buffer-overflow HBO in CIccMpeSpectralMatrix::Describe. The issue is observable under AddressSanitizer as an out-of-bounds heap read when...

CVE-2026-34533

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger Undefined Behavior UB in CIccCalculatorFunc::ApplySequence due to invalid enum values being loaded for icChannelFuncSignature. The issue is...

CVE-2026-34533

Affected software: iccDEV libraries/tools for ICC color management profiles. Issue: Before version 2.3.1.6, processing a crafted ICC profile can trigger Undefined Behavior in CIccCalculatorFunc::ApplySequence due to invalid enum values loaded for icChannelFuncSignature (UBSan shows a load of valu...

CVE-2026-3570

creationtimestamp| type| source ---|---|--- 2026-03-31 20:56:04+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mif2szu53t2h...

CVE-2026-5205

creationtimestamp| type| source ---|---|--- 2026-03-31 19:36:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miewehc6cf25...

CVE-2026-2123

creationtimestamp| type| source ---|---|--- 2026-03-31 19:20:27+00:00| published-proof-of-concept| Telegram/pGlKXNBirRT0gxqFC1bVLs6pojbUfu72MTdyyvCxHD2SpM 2026-03-31 19:20:34+00:00| published-proof-of-concept| Telegram/E6DSeVNy1uX9gptW9gUevVOkWF-Be1dfF2SOnx5Xk2F0EI 2026-03-31 19:35:19+00:00| seen...

CVE-2026-5087

creationtimestamp| type| source ---|---|--- 2026-03-31 17:51:54+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mieqjpuhg62p 2026-04-03 21:17:42+00:00| published-proof-of-concept| Telegram/qTocgF1bA6EikMAxrpKqC2AQPtdVVaE6KTy64KQmK5LJ1E...

CVE-2026-24165

creationtimestamp| type| source ---|---|--- 2026-03-31 17:28:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miepabtswa2c 2026-03-31 19:20:27+00:00| published-proof-of-concept| Telegram/pGlKXNBirRT0gxqFC1bVLs6pojbUfu72MTdyyvCxHD2SpM 2026-04-03 23:00:13+00:00| seen|...

CVE-2026-34220

creationtimestamp| type| source ---|---|--- 2026-03-31 17:25:56+00:00| published-proof-of-concept| Telegram/DQc3fgzqy6DN4suTckTk8JzzlHKPkbNE2HsjPTkc7SF-k 2026-03-31 18:46:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mietksqucw2j 2026-04-16 15:00:06+00:00|...

CVE-2026-34728

creationtimestamp| type| source ---|---|--- 2026-03-31 17:23:35+00:00| published-proof-of-concept| https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-38m8-xrfj-v38x 2026-04-02 16:51:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijo3vyh242t 2026-04-02 17:37:38+00:00|...

CVE-2026-21630

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0384/ 2026-04-01 12:20:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3migohoedj52z 2026-04-01 12:23:25+00:00| seen|...

CVE-2026-5289

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/ 2026-04-01 08:13:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migaoseuhk2s 2026-04-01 15:22:49+00:00| seen|...

CVE-2026-5282

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/ 2026-04-01 08:01:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mig7yd45t522 2026-04-01 15:31:15+00:00| seen|...