CVE-2026-34537 | InternationalColorConsortium iccDEV 2.3.1.1/2.3.1.2/2.3.1.3/2.3.1.4/2.3.1.5 ICC Color Profile CIccOpDefEnvVar::Exec reliance on undefined, unspecified, or implementation-defined behavior (ID 670)

A vulnerability was found in InternationalColorConsortium iccDEV 2.3.1.1/2.3.1.2/2.3.1.3/2.3.1.4/2.3.1.5. It has been declared as problematic. The impacted element is the function CIccOpDefEnvVar::Exec of the component ICC Color Profile Handler. The manipulation results in reliance on undefined, unspecified, or implementation-defined behavior.

This vulnerability is known as CVE-2026-34537. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.