CVE-2026-34554 | InternationalColorConsortium iccDEV 2.3.1.1/2.3.1.2/2.3.1.3/2.3.1.4/2.3.1.5 JSON Configuration IccCmmSearch.cpp costFunc out-of-bounds (ID 700)

A vulnerability, which was classified as problematic, was found in InternationalColorConsortium iccDEV 2.3.1.1/2.3.1.2/2.3.1.3/2.3.1.4/2.3.1.5. This vulnerability affects the function CIccApplyCmmSearch::costFunc in the library IccProfLib/IccCmmSearch.cpp of the component JSON Configuration Handler. Such manipulation leads to out-of-bounds read.

This vulnerability is documented as CVE-2026-34554. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.