CVE-2026-34546
Division by Zero in iccDEV TIFF Handling Causes Undefined Behavior
Publication date: 2026-03-31
Last updated on: 2026-04-20
Assigner: GitHub, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| color | iccdev | to 2.3.1.6 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-369 | The product divides a value by zero. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in iccDEV's iccTiffDump tool prior to version 2.3.1.6. It occurs when a specially crafted TIFF file is processed, leading to undefined behavior caused by a division by zero error in the TIFF handling code.
How can this vulnerability impact me? :
The vulnerability can cause a denial of service condition by triggering undefined behavior, which may crash the iccTiffDump tool or cause it to behave unpredictably. This can disrupt workflows that rely on this tool for ICC color profile management.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update iccTiffDump to version 2.3.1.6 or later, where the issue has been patched.