EUVD-2026-17708

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a stack-buffer-overflow SBO in CIccCalculatorFunc::Apply when processed via iccApplyNamedCmm. Under AddressSanitizer, the failure is reported as...

CVE-2026-34542 iccDEV: SBO in CIccCalculatorFunc::Apply()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a stack-buffer-overflow SBO in CIccCalculatorFunc::Apply when processed via iccApplyNamedCmm. Under AddressSanitizer, the failure is reported as...

EUVD-2026-17707

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger Undefined Behavior UB via a null-pointer member call in CIccCombinedConnectionConditions::CIccCombinedConnectionConditions reported by UBSan as...

EUVD-2026-17705

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a heap-buffer-overflow HBO in icMemDump when iccDumpProfile attempts to dump/describe malformed tag contents. The issue is observable under...

EUVD-2026-17701

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger Undefined Behavior UB in CIccOpDefEnvVar::Exec due to invalid enum values being loaded for icSigCmmEnvVar. The issue is observable under UBSan a...

CVE-2026-34536 iccDEV: SO in SIccCalcOp::ArgsUsed()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a stack overflow SO in SIccCalcOp::ArgsUsed. The issue is observable under AddressSanitizer as a stack-overflow when iccApplyProfiles processes ...

EUVD-2026-17699

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a stack overflow SO in SIccCalcOp::ArgsUsed. The issue is observable under AddressSanitizer as a stack-overflow when iccApplyProfiles processes ...

CVE-2026-34535 iccDEV: SEGV in CIccTagArray::Cleanup()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a segmentation fault SEGV in CIccTagArray::Cleanup. The issue is observable under UBSan/ASan as misaligned member access / misaligned pointer...

EUVD-2026-17697

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a segmentation fault SEGV in CIccTagArray::Cleanup. The issue is observable under UBSan/ASan as misaligned member access / misaligned pointer...

CVE-2026-34535 iccDEV: SEGV in CIccTagArray::Cleanup()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a segmentation fault SEGV in CIccTagArray::Cleanup. The issue is observable under UBSan/ASan as misaligned member access / misaligned pointer...

CVE-2026-34533 iccDEV: UB in CIccCalculatorFunc::ApplySequence()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger Undefined Behavior UB in CIccCalculatorFunc::ApplySequence due to invalid enum values being loaded for icChannelFuncSignature. The issue is...

CVE-2026-32726

creationtimestamp| type| source ---|---|--- 2026-03-31 18:31:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miesq35nbb2w 2026-03-31 19:10:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mieuvvjrol25 2026-03-31 19:20:34+00:00| published-proof-of-concept|...

CVE-2026-23899

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0384/ 2026-04-01 11:16:06+00:00| published-proof-of-concept| Telegram/or2m3WCYby8bXskMQzpfDu1qBTJahou7yZRDnRXRdJQw8o 2026-04-01 11:58:23+00:00| seen|...

CVE-2026-34240

creationtimestamp| type| source ---|---|--- 2026-03-31 16:28:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mielun7v3j2r 2026-03-31 16:28:33+00:00| seen| https://bsky.app/profile/potato.software/post/3mieluoldg22e 2026-03-31 16:29:03+00:00| seen|...

CVE-2026-0596

creationtimestamp| type| source ---|---|--- 2026-03-31 16:24:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mielnttg7r2z 2026-03-31 16:31:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mielzbemc32s 2026-03-31 17:24:40+00:00| published-proof-of-concept|...

CVE-2026-34953

creationtimestamp| type| source ---|---|--- 2026-03-31 15:25:44+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-98f9-fqg5-hvq5 2026-03-31 15:25:44+00:00| published-proof-of-concept|...

CVE-2026-34503

creationtimestamp| type| source ---|---|--- 2026-03-31 14:52:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miegiu7wq72i 2026-03-31 15:32:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mieiq3tu6t2c 2026-03-31 15:33:11+00:00| seen|...

CVE-2026-34506

creationtimestamp| type| source ---|---|--- 2026-03-31 12:25:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mie6cc6f472s 2026-03-31 12:26:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mie6dkiv7l27 2026-03-31 12:27:18+00:00| seen|...

PT-2026-29396

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a null-pointer dereference NPD in CIccTagLut16::Write can be triggered when processing a crafted ICC profile embedded in a TIFF and extracted during iccTiffDump. This issue has...

PT-2026-29388

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a heap-buffer-overflow HBO in icMemDump when iccDumpProfile attempts to dump/describe malformed tag contents. The issue is observable under...