CVE-2026-34534 | InternationalColorConsortium iccDEV 2.3.1.1/2.3.1.2/2.3.1.3/2.3.1.4/2.3.1.5 ICC Color Profile Describe heap-based overflow (ID 665)

A vulnerability was found in InternationalColorConsortium iccDEV 2.3.1.1/2.3.1.2/2.3.1.3/2.3.1.4/2.3.1.5 and classified as critical. Impacted is the function CIccMpeSpectralMatrix::Describe of the component ICC Color Profile Handler. Executing a manipulation can lead to heap-based buffer overflow.

This vulnerability appears as CVE-2026-34534. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.