Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 9

Export CSV
CVE-2016-10165

lcms2: Out-of-bounds read in Type_MLU_Read()

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.

CVSS 3.1 · 7.1 High EPSS 2.8% KEV · Not listed
Vendors
Canonical Debian Littlecms and 3 more
Products
Ubuntu Linux Debian Linux Little Cms Color Engine and 20 more
CVE-2026-41254

Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Littlecms
Products
Little Cms Little Cms Color Engine
CVE-2026-42798

Integer Overflow in Little CMS ParseCube Function

Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Littlecms
Products
Little Cms Color Engine
CVE-2008-5316

lcms: insufficient input validation in ReadEmbeddedTextTag

Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a different vulnerability than CVE-2007-2741.

CVSS 2.0 · 10.0 Critical EPSS 2.8% KEV · Not listed
Vendors
Littlecms Redhat
Products
Lcms Little Cms Color Engine Enterprise Linux
CVE-2008-5317

lcms: unsigned -> signed integer cast issue in cmsAllocGamma

Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient memory.

CVSS 2.0 · 10.0 Critical EPSS 2.2% KEV · Not listed
Vendors
Littlecms Redhat
Products
Lcms Little Cms Color Engine Enterprise Linux
CVE-2013-7455

lcms2: double free on error recovering

Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via a malformed ICC profile that triggers an error in the default intent handler.

CVSS 3.0 · 9.8 Critical EPSS 6.2% KEV · Not listed
Vendors
Littlecms
Products
Little Cms Color Engine
CVE-2013-4276

lcms: Stack-based buffer overflows in ColorSpace conversion calculator and TIFF compare utility

Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cause a denial of service (crash) via a crafted (1) ICC color profile to the icctrans utility or (2) TIFF image to the tiffdiff utility.

CVSS 2.0 · 4.3 Medium EPSS 4.0% KEV · Not listed
Vendors
Littlecms
Products
Little Cms Color Engine
CVE-2013-4160

CMS: multiple potential flaws

Little CMS (lcms2) before 2.5, as used in OpenJDK 7 and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to (1) cmsStageAllocLabV2ToV4curves, (2) cmsPipelineDup, (3) cmsAllocProfileSequenceDescription, (4) CurvesAlloc, and (5) cmsnamed.

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed
Vendors
Littlecms
Products
Little Cms Color Engine
CVE-2018-16435

lcms2: Integer overflow in AllocateDataSet() in cmscgats.c leading to heap-based buffer overflow

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

CVSS 3.0 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Canonical Debian Littlecms and 1 more
Products
Ubuntu Linux Debian Linux Little Cms Color Engine and 4 more